Categorygithub.com/rassec/laraveln00b
modulepackage
0.0.0-20200513221028-6d97cba3d7fb
Repository: https://github.com/rassec/laraveln00b.git
Documentation: pkg.go.dev

# README

添加了超时时间与关键匹配

laravelN00b

Incorrect configuration allows you to access .env files or reading env variables. LaravelN00b automated scan .env files and checking debug mode in victim host.

asciicast

Scan rationale

  • Scan host.
  • Resolve IP adress and check .env file in IP Adress
  • Checking debug mode Laravel ( Read .env variables )

Installation

1 - Install with installer.sh

chmod +x installer.sh

./installer.sh

2 - Install manual

go get github.com/briandowns/spinner

go get github.com/christophwitzko/go-curl

go run main.go --hostname victim.host

or

go build laravelN00b main.go

Run

./laravelN00b --hostname victim.host