afrog

A tool for finding vulnerabilities.
❤️POC [442]
🐸Like please tag stars🌟⭐

POC directory • 中文文档

What is afrog

afrog is a tool for finding vulnerabilities. If you want to finding vulnerabilities such as SQL injection, XSS, file inclusion, etc., AWVS does a better job. Otherwise, you can try afrog for free.

Features

• Great performance, least requests, best results
• Real-time display, scanning progress
• View request and response packets of scan results
• Start the program to automatically update the local POC library
• Long-term maintenance, update POC （afrog-pocs ）
• API interface, easy access to other projects

Download afrog

Release

Running afrog

Scan a single target.

afrog -t http://example.com -o result.html

Scan multiple targets.

afrog -T urls.txt -o result.html

For example: urls.txt

http://example.com
http://test.com
http://github.com

Test a single POC file

afrog -t http://example.com -P ./testing/poc-test.yaml -o result.html

Test multiple POC files

afrog -t http://example.com -P ./testing/ -o result.html

Output html report