Skip to content

Polyglot file generator to bypass the file content validation from an webserver

License

Notifications You must be signed in to change notification settings

Blackf1reBird/PolyFU

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

PolyFU - CLI

Description

The PolyFU project was created to simplify the process of generating polyglot JPEG/PHP, etc.. files. While security testing, this can be useful in situations where you need to trick a webserver into accepting your payloads. If the server expects an image, just provide it with an "image", right? Run PolyFU, select your option, setup your payload, and take control.

Setup and Usage

Requirements

  • min. Python3.11 (and Pip)
  • ExifTool

Setup

  • Clone the repository
git clone https://github.com/Blackf1reBird/PolyFU.git
  • In the projects root directory, you can install the requirements (but you don't need to, it's basically for coloring the CLI).
pip install -r requirements.txt

Usage

  • To execute PolyFU you need to run this command
python3 polyfu

LICENSE

This project is published under the MIT License.