CRLFsuite - Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection.

Installation

$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h

Features

• Single URL scanning
• Multiple URL scanning
• Stdin supported
• GET & POST method supported
• Concurrency
• Best Payloads list
• Headers supported
• Fast and efficient scanning with negligible false-positive

Usage

Single URL scanning:

$ crlfsuite -u "http://testphp.vulnweb.com"

Multiple URLs scanning:

$ crlfsuite -i targets.txt

from stdin:

$ subfinder -d google.com -silent | httpx -silent | …

bugbounty tool fast injection scanning tool webapp pentesting