tinja
CLI tool for testing web pages for template injection
Site oficial:
https://github.com/Hackmanit/TInjA
Empacotamento:
https://gitlab.com/kalilinux/packages/tinja
Versão no Kali: 1.2.0-0kali1 · Arquiteturas: any · Comandos: 1
Metapacotes:
kali-linux-everything
Documentação do Kali:
https://www.kali.org/tools/tinja/
TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.
sudo apt install tinja (12.62 MB)
Dependências: libc6
Escolha um comando ao lado para ver a descrição e a ajuda completa.
tinja
root@kali:~# tinja -h
__/\\\\\\\\\\\\\\\__/\\\\\\\\\\\______________________________/\\\\\\\\\____
_\///////\\\/////__\/////\\\///______________________/\\\___/\\\\\\\\\\\\\__
_______\/\\\___________\/\\\________________________\///___/\\\/////////\\\_
_______\/\\\___________\/\\\______/\\/\\\\\\_________/\\\_\/\\\_______\/\\\_
_______\/\\\___________\/\\\_____\/\\\////\\\_______\/\\\_\/\\\\\\\\\\\\\\\_
_______\/\\\___________\/\\\_____\/\\\__\//\\\______\/\\\_\/\\\/////////\\\_
_______\/\\\___________\/\\\_____\/\\\___\/\\\__/\\_\/\\\_\/\\\_______\/\\\_
_______\/\\\________/\\\\\\\\\\\_\/\\\___\/\\\_\//\\\\\\__\/\\\_______\/\\\_
_______\///________\///////////__\///____\///___\//////___\///________\///__
the Template INJection Analyzer. (v1.2.0)
Published by Hackmanit under http://www.apache.org/licenses/LICENSE-2.0
Author: Maximilian Hildebrand
Repository: https://github.com/Hackmanit/TInjA
Usage:
tinja [flags]
tinja [command]
Available Commands:
help Help about any command
jsonl Scan using a JSONL file
raw Scan using a Raw file
url Scan a single or multiple URLs
Flags:
--config string set the path for a config file to be read
-c, --cookie strings add custom cookie(s)
--csti enable scanning for Client-Side Template Injections using a headless browser
--escapereport escape HTML special chars in the JSON report
-H, --header strings add custom header(s)
-h, --help help for tinja
--precedinglength int how many chars shall be memorized, when getting the preceding chars of a body reflection point (default 30)
--proxycertpath string set the path for the certificate of the proxy
--proxyurl string set the URL of the proxy
-r, --ratelimit float number of requests per seconds. 0 is infinite (default 0)
--reportpath string set the path for a report to be generated
--subsequentlength int how many chars shall be memorized, when getting the subsequent chars of a body reflection point (default 30)
--testheaders strings headers to test. E.g. --testheaders Host,Origin,X-Forwarded-For
--timeout int seconds until timeout (default 15)
--useragentchrome set chrome as user-agent. Default user-agent is 'TInjA v1.2.0'
-v, --verbosity int verbosity of the output. 0 = quiet, 1 = default, 2 = verbose (default 1)
--version version for tinja
Use "tinja [command] --help" for more information about a command.
