WSPIH

Website Personal Sensitive Information File Scanner

Disclaimer:

• This project is for learning, testing, and communication purposes only. Do not use for illegal purposes.
• If the target is a school website, please submit the vulnerability to the Education Industry Vulnerability Reporting Platform. Thank you.

The Education Industry Vulnerability Reporting Platform is a vulnerability reporting platform for the entire education industry. The platform aims to gather multiple forces to help improve the information system security of schools and units associated with the education system, escorting the advancement of education informatization.

Introduction:

Development Notes

Usage Effect:

Usage Steps:

Initialization:

# 下载
git clone https://github.com/jerrychan807/WSPIH.git

# 进入项目目录
cd WSPIH

# 安装依赖模块
pip3 install -r requirements.txt

# 修改配置文件(若不修改,则使用默认配置)
vi config.py

Start Scanning:

# 使用
python3 SensitivesHunter.py 目标文件 结果文件夹

# 示例
python3 SensitivesHunter.py targets/http-src-1-100.txt src

View Results:

If sensitive files are scanned...

Individual Results:

• Results for each target will be saved in result_folder/corresponding_domain.
• Problematic sensitive files will be retained.
• File links file_links.json, sensitive results result.json

Summary Results:

# 输出最终汇总的结果
python3 CombineResult.py 结果文件夹

# 示例
python3 CombineResult.py src

• View the final merged result: all_result.txt

Contributors:

• JackChan1024