Credax - WHEN THE HEAT IS ON, YOU GOTTA CALL THE FUZZ.
Credax is a lite-weight AI Powered Fuzzing Tool built in Python. Credax uses the least of your CPU by using more concurrent tasks and less threads, thus saving your OS Threads, providing you with better speed and results.
CREDAX auto removes all consecutive result that respond with same length, thus removing almost all consecutive false positives, providing better output + Slack Notifications.
Credax requires Python3.7 + to run. Please upgrade your Python version to 3.7 or higher to use Credax.
- Clone the Credax reporitory.
git clone https://github.com/notmarshmllow/credax.git
- Install the Requirements
pip install -r requirements.txt
python3 credax.py -h
Credax is lite-weight tool built for speed and effeciency.
The following usage examples show the simplest task you can accomplish with Credax
.
python3 credax.py -d https://example.com/ -w wordlist.txt
Use -s
switch to send notifications on your Slack wordspace. Add your slack webhook URL in slack_variables.py file.
python3 credax.py -d https://example.com/ -w wordlist.txt -s
Use -c
switch to filter HTTP Status Code from response.
python3 credax.py -d https://example.com/ -w wordlist.txt -c 200,401,403
Write output to a file using -o
switch.
python3 credax.py -d https://example.com/ -w wordlist.txt -o filename.txt
Fuzz a list of URLs, store output in file and activate slack notifications with following command.
./credax.sh urllist wordlist
Use -POST
to send POST Requests. By default Credax sends GET Requests for Fuzzing.
python3 credax.py -d https://example.com/ -w wordlist.txt -POST
- Create your own Slack App.
- Go to api.slack.com
- Select your App
- Select
Add features and functionality
>Incoming Webhooks
. - Below on the page you will find your
Slack Webhook URL
. - Copy and Paste you Slack Webhook URL in place of
_slack_webhook_url_here_
insideslack_variables.py
file.
All developments to the tool are welcomed and highly appreciated !
CREDAX - Developed by @notmarshmllow✨