Otoattack - Vulnerability Scanner
— Via, Mr0Wido

About

Otoattack is a Python-based tool for Vulnerability Scan.

Otoattack provides a variety of vuln scans, including these;

• XSS
• SQLi
• SSRF
• Open Redirect
• LFI
• CSRF
• CRLF
• SSTI
• Header Injection
• Cors
• Web Cache Vulnerability
• HTTP Request Smuggling
• Subdomain Takeover
• Nuclei Scan

Installation

If you are using a virtual environment, run these commands:

$ python3 -m venv venv
$ source venv/bin/activate  

$ git clone https://github.com/Mr0Wido/otoattack.git
$ cd otoattack
$ pip install .

Run these commands for installing tools:

$ sudo chmod +x install.sh
$ ./install.sh

Options

There are three options and they are required.

Flags		Description
-ul	--list	Path to the list of targets
-dl	--domain_list	Path to the list of domains for subdomain takeover
-d	--domain	Domain to subdomain takeover
-scan		Arg for the starting scan
-config		Create the config file

Usage

Provide Servers for XSS and SSTI. It's required.

These servers can be Burp Collaborator or you can use these free resources;

• XSSHUNTER
• RequestBin

$ python3 otoattack -config

Scan

$ python3 otoattack.py -ul url.txt -dl domain.txt -scan

Otoattack Workflow