{"repo":"volkandindar/agartha","free":true,"listed":false,"github":"https://github.com/volkandindar/agartha","clone":"git clone https://github.com/volkandindar/agartha.git","description":"A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers \"Copy as JavaScript\" to convert HTTP requests for enhanced XSS testing.","language":"Python","stars":412,"topics":["penetration-testing","pentesting","cybersecurity","burp-extensions","hacking","hacking-tool","application-security","appsec","offsec","burpsuite"],"license":null,"category":"security-tools","readme_excerpt":"Agartha Payload Injection (LFI, RCE, SQLi, with optional BCheck), Auth Issues (Access Matrix, HTTP 403), Copy as JavaScript, and Bambdas Agartha, specializes in advance payload generation and access control assessment. It adeptly identifies vulnerabilities related to injection attacks, and authentication/authorization issues. The dynamic payload generator crafts extensive wordlists for various injection vectors, including SQL Injection, Local File Inclusion (LFI), and Remote Code Execution(RCE). Furthermore, the extension constructs a comprehensive user access matrix, revealing potential access violations and privilege escalation paths. It also assists in performing HTTP 403 bypass checks, shedding light on auth misconfigurations. Additionally, it can convert HTTP requests to JavaScript code to help digging up XSS issues more. In summary: - Payload Generator : It dynamically constructs comprehensive wordlists for injection attacks, incorporating various encoding and escaping characters to enhance the effectiveness of security testing. These wordlists cover critical vulnerabilities such as SQL Injection (SQLi), Local File Inclusion (LFI), Remote Code Execution (RCE), and now also support BCheck syntax for seamless integration with Burp's BCheck framework. - Local File Inclusion, Path Traversal: It helps identifying vulnerabilities that allow attackers to access files on the server's filesystem. - Remote Code Execution, Command Injection: It aims to detects potential command in","default_branch":null,"files":null,"tree":[],"storefront":"/r/volkandindar","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/volkandindar/agartha/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}