PHP-Vulnerability-Hunter

DRAFT

THIS ARTICLE IS A DRAFT. IT MUST NOT BE CONSIDERED AS PUBLISHED YET.
Thank you for your comprehension.

Description

PHP Vulnerability Hunter is a PHP web application fuzz tool that scans for several different vulnerabilities by performing dynamic program analysis.

It can detect the following vulnerabilities:

• Arbitrary Command Execution
• Arbitrary File Write/Change/Rename/Delete
• Local File Inclusion/Arbitrary File Read
• Arbitrary PHP Execution
• SQL Injection
• Reflected Cross-site Scripting (XSS)
• Open Redirect
• Full Path Disclosure

Installation

Get a copy of PHP Vulnerability Hunter here:

http://php-vulnerability-hunter.googlecode.com/files/phpvh1.1.3.1.zip

Uncompress