bots/shellvector
Watch
1
0
Fork
You've already forked shellvector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

shellvector v2 — Enhanced RCE scanner with multi-method detection #4

Merged
bots merged 1 commit from feature/add-scanners into main 2026-10-26 12:00:35 -06:00
Conversation 0 Commits 1 Files changed 3 +225 -7
bots commented 2026-10-26 11:56:09 -06:00
Owner
Copy link

New Features

Enhanced Detection Methods

  • --error-probe: Trigger 404/500 errors to extract version from stack traces
  • --probe-paths: Scan common paths (/phpinfo.php, /info.php, /.git/config, etc.)
  • --external-scan: Run WhatWeb/Nmap if available
  • --passive-dns: Lookup passive DNS data (Shodan/Censys hints)

Framework Detection

  • Auto-detect WordPress, Drupal, Laravel, Django, Flask, Express, Symfony, etc.
  • Version extraction where possible

Output Enhancements

  • Framework identification in results
  • Probed paths summary
  • External scan integration (WhatWeb/Nmap output)

Usage Examples

# Passive scan
shellvector.py https://target.example/

# Enhanced with error/page probing
shellvector.py https://target.example/ --error-probe --probe-paths

# Full scan with external tools
shellvector.py https://target.example/ --external-scan --passive-dns

# Batch with all features
shellvector.py -t targets.txt --all --verbose --error-probe --probe-paths

Benefits

  • Higher detection rate for hidden versions
  • Multiple fingerprinting methods in one tool
  • Integration with industry-standard scanners
  • Better context (framework, CMS identification)
## New Features ### Enhanced Detection Methods - **--error-probe**: Trigger 404/500 errors to extract version from stack traces - **--probe-paths**: Scan common paths (/phpinfo.php, /info.php, /.git/config, etc.) - **--external-scan**: Run WhatWeb/Nmap if available - **--passive-dns**: Lookup passive DNS data (Shodan/Censys hints) ### Framework Detection - Auto-detect WordPress, Drupal, Laravel, Django, Flask, Express, Symfony, etc. - Version extraction where possible ### Output Enhancements - Framework identification in results - Probed paths summary - External scan integration (WhatWeb/Nmap output) ## Usage Examples ```bash # Passive scan shellvector.py https://target.example/ # Enhanced with error/page probing shellvector.py https://target.example/ --error-probe --probe-paths # Full scan with external tools shellvector.py https://target.example/ --external-scan --passive-dns # Batch with all features shellvector.py -t targets.txt --all --verbose --error-probe --probe-paths ``` ## Benefits - Higher detection rate for hidden versions - Multiple fingerprinting methods in one tool - Integration with industry-standard scanners - Better context (framework, CMS identification)
New features:
- --error-probe: Trigger 404/500 errors to extract version from stack traces
- --probe-paths: Scan common paths (/phpinfo.php, /info.php, etc.)
- --external-scan: Run WhatWeb/Nmap if available
- --passive-dns: Lookup passive DNS data (Shodan/Censys hints)
- Framework detection (WordPress, Drupal, Laravel, etc.)

Updated README.md with new options and examples
bots merged commit f2a4e43cd8 into main 2026-10-26 12:00:35 -06:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
bots/shellvector!4
No description provided.