Automated All-in-One OS Command Injection Exploitation Tool
This report presents the forensic synthetic code analysis of commixproject/commix, a Python project with 5,828 GitHub stars. SynthScan v2.0 examined 30,324 lines of code across 132 source files, recording 808 pattern matches distributed across 13 syntactic categories. The overall adjusted score of 42.0 places this repository in the Strong AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 808 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | setup.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | commix.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/compat.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/convert.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/main.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/testing.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/shells/bind_tcp.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/shells/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/shells/reverse_tcp.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/randomcase.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/sleep2usleep.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/backslashes.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/rev.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/hexencode.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/sleep2timeout.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/xforwardedfor.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/space2plus.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/printf2echo.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/multiplespaces.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/uninitializedvariable.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/slash2env.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/caret.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/doublequotes.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/backticks.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/space2htab.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/dollaratsigns.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/space2ifs.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/space2vtab.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/base64encode.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/nested.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/tamper/singlequotes.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/stability.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/proxy.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/redirection.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/tor.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/authentication.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/parameters.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/headers.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/requests/requests.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/modules/modules_handler.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/modules/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/modules/shellshock/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/injections/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/injections/blind/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/injections/blind/techniques/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …/injections/blind/techniques/time_based/tb_payloads.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …ore/injections/blind/techniques/time_based/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …e/injections/blind/techniques/time_based/tb_handler.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …/injections/blind/techniques/time_based/tb_injector.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | src/core/injections/results_based/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …c/core/injections/results_based/techniques/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …ections/results_based/techniques/classic/cb_handler.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …njections/results_based/techniques/classic/__init__.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …ctions/results_based/techniques/classic/cb_injector.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …ctions/results_based/techniques/classic/cb_payloads.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| HIGH | …ons/results_based/techniques/eval_based/eb_injector.py | 0 | this file is part of commix project (https://commixproject.com). copyright (c) 2014-2026 anastasios stasinopoulos (@ancs | STRING |
| 48 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | commix.py | 31 | CODE | |
| LOW | src/core/main.py | 26 | CODE | |
| LOW | src/core/main.py | 27 | CODE | |
| LOW | src/core/main.py | 38 | CODE | |
| LOW | src/core/main.py | 40 | CODE | |
| LOW | src/core/main.py | 40 | CODE | |
| LOW | src/core/main.py | 40 | CODE | |
| LOW | src/core/main.py | 47 | CODE | |
| LOW | src/core/main.py | 933 | CODE | |
| LOW | src/core/testing.py | 16 | CODE | |
| LOW | src/core/testing.py | 18 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 17 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 18 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 19 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 20 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 27 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 27 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 17 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 18 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 19 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 33 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 33 | CODE | |
| LOW | src/core/requests/proxy.py | 16 | CODE | |
| LOW | src/core/requests/proxy.py | 17 | CODE | |
| LOW | src/core/requests/proxy.py | 20 | CODE | |
| LOW | src/core/requests/proxy.py | 23 | CODE | |
| LOW | src/core/requests/proxy.py | 25 | CODE | |
| LOW | src/core/requests/proxy.py | 25 | CODE | |
| LOW | src/core/requests/proxy.py | 25 | CODE | |
| LOW | src/core/requests/proxy.py | 25 | CODE | |
| LOW | src/core/requests/proxy.py | 26 | CODE | |
| LOW | src/core/requests/redirection.py | 16 | CODE | |
| LOW | src/core/requests/redirection.py | 17 | CODE | |
| LOW | src/core/requests/redirection.py | 18 | CODE | |
| LOW | src/core/requests/redirection.py | 19 | CODE | |
| LOW | src/core/requests/redirection.py | 24 | CODE | |
| LOW | src/core/requests/redirection.py | 28 | CODE | |
| LOW | src/core/requests/redirection.py | 30 | CODE | |
| LOW | src/core/requests/redirection.py | 30 | CODE | |
| LOW | src/core/requests/redirection.py | 30 | CODE | |
| LOW | src/core/requests/redirection.py | 30 | CODE | |
| LOW | src/core/requests/redirection.py | 21 | CODE | |
| LOW | src/core/requests/redirection.py | 23 | CODE | |
| LOW | src/core/requests/tor.py | 17 | CODE | |
| LOW | src/core/requests/tor.py | 19 | CODE | |
| LOW | src/core/requests/tor.py | 22 | CODE | |
| LOW | src/core/requests/tor.py | 24 | CODE | |
| LOW | src/core/requests/tor.py | 25 | CODE | |
| LOW | src/core/requests/tor.py | 25 | CODE | |
| LOW | src/core/requests/tor.py | 25 | CODE | |
| LOW | src/core/requests/tor.py | 25 | CODE | |
| LOW | src/core/requests/authentication.py | 17 | CODE | |
| LOW | src/core/requests/authentication.py | 18 | CODE | |
| LOW | src/core/requests/authentication.py | 19 | CODE | |
| LOW | src/core/requests/authentication.py | 28 | CODE | |
| LOW | src/core/requests/authentication.py | 29 | CODE | |
| LOW | src/core/requests/authentication.py | 29 | CODE | |
| LOW | src/core/requests/authentication.py | 29 | CODE | |
| LOW | src/core/requests/parameters.py | 17 | CODE | |
| LOW | src/core/requests/parameters.py | 18 | CODE | |
| 168 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | src/core/main.py | 741 | # Check if defined "--list-tampers" option. | COMMENT |
| LOW⚡ | src/core/main.py | 750 | # Check if defined "--ignore-dependencies" option. | COMMENT |
| LOW⚡ | src/core/main.py | 754 | # Check if defined "--update" option. | COMMENT |
| LOW⚡ | src/core/main.py | 758 | # Check if defined "--install" option. | COMMENT |
| LOW⚡ | src/core/main.py | 763 | # Check if defined "--purge" option. | COMMENT |
| LOW⚡ | src/core/main.py | 1008 | # Check if ".git" exists and check for updated version! | COMMENT |
| LOW⚡ | src/core/main.py | 1012 | # Check if option is "--url" for single url test. | COMMENT |
| LOW⚡ | src/core/main.py | 1020 | # Check if defined character used for splitting parameter values. | COMMENT |
| LOW⚡ | src/core/main.py | 1024 | # Check if defined character used for splitting parameter values. | COMMENT |
| LOW | src/core/main.py | 150 | # Check if defined any HTTP Proxy (--proxy option). | COMMENT |
| LOW | src/core/main.py | 277 | # Check if http / https | COMMENT |
| LOW | src/core/main.py | 504 | # Check if defined character used for splitting cookie values. | COMMENT |
| LOW | src/core/main.py | 539 | # Check if specified wrong injection technique | COMMENT |
| LOW | src/core/main.py | 542 | # Check if used the ',' separator | COMMENT |
| LOW | src/core/main.py | 602 | # Check if defined "--url" or "-m" option. | COMMENT |
| LOW | src/core/main.py | 683 | # Check if defined "--version" option. | COMMENT |
| LOW | src/core/main.py | 696 | # Check if specified wrong alternative shell | COMMENT |
| LOW | src/core/main.py | 797 | # Check if defined "--proxy" option. | COMMENT |
| LOW | src/core/main.py | 822 | # Check if defined Tor (--tor option). | COMMENT |
| LOW | src/core/main.py | 839 | # Check if defined "--auth-cred" and/or '--auth-type'. | COMMENT |
| LOW | src/core/main.py | 866 | # Check if defined "--abort-code" option. | COMMENT |
| LOW | src/core/main.py | 875 | # Check if defined "--ignore-code" option. | COMMENT |
| LOW | src/core/main.py | 887 | # Check if defined "--wizard" option. | COMMENT |
| LOW | src/core/main.py | 926 | # Check if defined "--timesec" option. | COMMENT |
| LOW | src/core/main.py | 930 | # Check if defined "--threads" option. | COMMENT |
| LOW | src/core/main.py | 1043 | # Check if option is "-m" for multiple urls test. | COMMENT |
| LOW | src/core/main.py | 1066 | # Check if option "--crawl" is enabled. | COMMENT |
| LOW | src/core/requests/authentication.py | 55 | # Check if defined extra headers. | COMMENT |
| LOW⚡ | src/core/requests/authentication.py | 128 | # Check if verbose mode on | COMMENT |
| LOW | src/core/requests/authentication.py | 151 | # Check if defined any HTTP Proxy (--proxy option). | COMMENT |
| LOW⚡ | src/core/requests/parameters.py | 393 | # Check if JSON Object. | COMMENT |
| LOW⚡ | src/core/requests/parameters.py | 401 | # Check if XML Object. | COMMENT |
| LOW⚡ | src/core/requests/parameters.py | 754 | # Check if defined the INJECT_TAG | COMMENT |
| LOW⚡ | src/core/requests/parameters.py | 764 | # Check if multiple parameters are supplied. | COMMENT |
| LOW⚡ | src/core/requests/parameters.py | 769 | # Check if not defined the "INJECT_HERE" tag in parameter | COMMENT |
| LOW | src/core/requests/parameters.py | 180 | # Check if single parameter is supplied. | COMMENT |
| LOW | src/core/requests/parameters.py | 182 | # Check if defined the INJECT_TAG | COMMENT |
| LOW | src/core/requests/parameters.py | 201 | # Check if defined the "INJECT_HERE" tag | COMMENT |
| LOW | src/core/requests/parameters.py | 315 | # Check if parameters are empty or meaningless | COMMENT |
| LOW | src/core/requests/parameters.py | 520 | # Check if not defined the "INJECT_HERE" tag in parameter | COMMENT |
| LOW | src/core/requests/parameters.py | 588 | # Check if single parameter is supplied. | COMMENT |
| LOW | src/core/requests/parameters.py | 687 | # Check if defined "--prefix" option. | COMMENT |
| LOW | src/core/requests/parameters.py | 710 | # Check if defined "--suffix" option. | COMMENT |
| LOW | src/core/requests/parameters.py | 743 | # Check if single paramerter is supplied. | COMMENT |
| LOW⚡ | src/core/requests/headers.py | 374 | # Check if defined any Cookie HTTP header. | COMMENT |
| LOW⚡ | src/core/requests/headers.py | 378 | # Check if defined any User-Agent HTTP header. | COMMENT |
| LOW⚡ | src/core/requests/headers.py | 382 | # Check if defined any Referer HTTP header. | COMMENT |
| LOW⚡ | src/core/requests/headers.py | 386 | # Check if defined any Host HTTP header. | COMMENT |
| LOW | src/core/requests/headers.py | 413 | # Check if defined any HTTP Authentication credentials. | COMMENT |
| LOW | src/core/requests/headers.py | 451 | # Check if defined any extra HTTP headers. | COMMENT |
| LOW | src/core/requests/headers.py | 498 | # Check if it is a custom header injection. | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 174 | # Check if defined POST data | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 1077 | # Check if defined "--verbose" option. | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 1082 | # Check if defined cookie with "INJECT_HERE" tag | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 1087 | # Check if defined custom header with "INJECT_HERE" tag | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 1092 | # Check if defined user-agent with "INJECT_HERE" tag | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 1097 | # Check if defined referer with "INJECT_HERE" tag | COMMENT |
| LOW⚡ | src/core/requests/requests.py | 1102 | # Check if defined host with "INJECT_HERE" tag | COMMENT |
| LOW | src/core/requests/requests.py | 114 | # Check if defined POST data | COMMENT |
| LOW | src/core/requests/requests.py | 282 | # Check if failed to identify the realm attribute. | COMMENT |
| 47 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/core/main.py | 138 | CODE | |
| LOW | src/core/main.py | 410 | CODE | |
| LOW | src/core/testing.py | 24 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 32 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 137 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 456 | CODE | |
| LOW | src/core/shells/bind_tcp.py | 539 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 38 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 169 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 715 | CODE | |
| LOW | src/core/shells/reverse_tcp.py | 798 | CODE | |
| LOW | src/core/tamper/space2ifs.py | 37 | CODE | |
| LOW | src/core/tamper/space2vtab.py | 35 | CODE | |
| LOW | src/core/requests/redirection.py | 58 | CODE | |
| LOW | src/core/requests/authentication.py | 79 | CODE | |
| LOW | src/core/requests/authentication.py | 112 | CODE | |
| LOW | src/core/requests/parameters.py | 123 | CODE | |
| LOW | src/core/requests/parameters.py | 391 | CODE | |
| LOW | src/core/requests/parameters.py | 454 | CODE | |
| LOW | src/core/requests/parameters.py | 510 | CODE | |
| LOW | src/core/requests/parameters.py | 597 | CODE | |
| LOW | src/core/requests/parameters.py | 661 | CODE | |
| LOW | src/core/requests/parameters.py | 722 | CODE | |
| LOW | src/core/requests/headers.py | 128 | CODE | |
| LOW | src/core/requests/headers.py | 370 | CODE | |
| LOW | src/core/requests/requests.py | 112 | CODE | |
| LOW | src/core/requests/requests.py | 166 | CODE | |
| LOW | src/core/requests/requests.py | 370 | CODE | |
| LOW | src/core/requests/requests.py | 822 | CODE | |
| LOW | src/core/requests/requests.py | 937 | CODE | |
| LOW | src/core/requests/requests.py | 1010 | CODE | |
| LOW | src/core/requests/requests.py | 1069 | CODE | |
| LOW | src/core/modules/shellshock/shellshock.py | 91 | CODE | |
| LOW | src/core/modules/shellshock/shellshock.py | 183 | CODE | |
| LOW | src/core/modules/shellshock/shellshock.py | 210 | CODE | |
| LOW | src/core/modules/shellshock/shellshock.py | 237 | CODE | |
| LOW | src/core/modules/shellshock/shellshock.py | 275 | CODE | |
| LOW | src/core/modules/shellshock/shellshock.py | 521 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 28 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 86 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 180 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 244 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 304 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 366 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 422 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 497 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 563 | CODE | |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 619 | CODE | |
| LOW | …e/injections/blind/techniques/time_based/tb_handler.py | 35 | CODE | |
| LOW | src/core/injections/controller/shell_options.py | 63 | CODE | |
| LOW | src/core/injections/controller/shell_options.py | 95 | CODE | |
| LOW | src/core/injections/controller/shell_options.py | 127 | CODE | |
| LOW | src/core/injections/controller/controller.py | 172 | CODE | |
| LOW | src/core/injections/controller/controller.py | 217 | CODE | |
| LOW | src/core/injections/controller/controller.py | 272 | CODE | |
| LOW | src/core/injections/controller/controller.py | 344 | CODE | |
| LOW | src/core/injections/controller/controller.py | 487 | CODE | |
| LOW | src/core/injections/controller/controller.py | 927 | CODE | |
| LOW | src/core/injections/controller/controller.py | 964 | CODE | |
| LOW | src/core/injections/controller/controller.py | 1129 | CODE | |
| 112 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/core/main.py | 410 | def main(filename, url, http_request_method): | CODE |
| LOW⚡ | src/core/main.py | 733 | except Exception as ex: | CODE |
| LOW | src/core/main.py | 169 | except Exception as err_msg: | CODE |
| LOW | src/core/main.py | 244 | except Exception as err_msg: | CODE |
| LOW | src/core/main.py | 969 | except Exception as e: | CODE |
| LOW | src/core/testing.py | 44 | except Exception as e: | CODE |
| LOW | src/core/requests/proxy.py | 44 | except Exception as err_msg: | CODE |
| MEDIUM | src/core/requests/proxy.py | 31 | def use_proxy(request): | CODE |
| LOW | src/core/requests/tor.py | 52 | except Exception: | CODE |
| LOW | src/core/requests/authentication.py | 73 | except Exception as err_msg: | CODE |
| MEDIUM | src/core/requests/parameters.py | 236 | def register_custom_injection_marker(vuln_parameter, value_with_marker): | CODE |
| MEDIUM | src/core/requests/parameters.py | 305 | def is_empty_json_object(s): | CODE |
| MEDIUM | src/core/requests/parameters.py | 353 | def json_int_check(parameter, value): | CODE |
| LOW⚡ | src/core/requests/parameters.py | 242 | except Exception: | CODE |
| LOW | src/core/requests/parameters.py | 282 | except Exception: | CODE |
| LOW | src/core/requests/parameters.py | 308 | except Exception: | CODE |
| LOW | src/core/requests/parameters.py | 326 | except Exception: | CODE |
| LOW | src/core/requests/parameters.py | 356 | except Exception: | CODE |
| LOW | src/core/requests/parameters.py | 368 | except Exception: | CODE |
| LOW | src/core/requests/parameters.py | 606 | except Exception: | CODE |
| LOW | src/core/requests/headers.py | 308 | except Exception: | CODE |
| MEDIUM | src/core/requests/headers.py | 180 | def http_open(self, req): | CODE |
| MEDIUM | src/core/requests/requests.py | 112 | def crawler_request(url, http_request_method): | CODE |
| MEDIUM | src/core/requests/requests.py | 983 | def technology_identification(response): | CODE |
| LOW⚡ | src/core/requests/requests.py | 160 | except Exception: | CODE |
| LOW | src/core/requests/requests.py | 100 | except Exception: | CODE |
| LOW | src/core/requests/requests.py | 314 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 523 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 528 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 625 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 671 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 717 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 763 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 809 | except Exception as err_msg: | CODE |
| LOW | src/core/requests/requests.py | 890 | except Exception as e: | CODE |
| LOW | src/core/requests/requests.py | 1001 | except Exception: | CODE |
| MEDIUM | src/core/injections/controller/controller.py | 858 | def has_stored_session(check_param): | CODE |
| LOW | src/core/injections/controller/controller.py | 395 | except Exception: | CODE |
| LOW | src/core/injections/controller/controller.py | 459 | except Exception: | CODE |
| LOW | src/core/injections/controller/controller.py | 861 | except Exception: | CODE |
| MEDIUM | src/core/injections/controller/handler.py | 78 | def pseudo_terminal_shell(injector, separator, maxlen, TAG, cmd, prefix, suffix, | CODE |
| LOW | src/core/injections/controller/handler.py | 225 | except Exception: | CODE |
| LOW | src/core/injections/controller/handler.py | 474 | except Exception: | CODE |
| LOW | src/core/injections/controller/handler.py | 754 | except Exception: | CODE |
| MEDIUM | src/core/injections/controller/checks.py | 645 | def tab_autocompleter(): | CODE |
| MEDIUM | src/core/injections/controller/checks.py | 855 | def process_page_content(response, action): | CODE |
| MEDIUM | src/core/injections/controller/checks.py | 2226 | def perform_payload_modification(payload): | CODE |
| LOW | src/core/injections/controller/checks.py | 380 | except Exception as e: | CODE |
| LOW | src/core/injections/controller/checks.py | 795 | except Exception as e: | CODE |
| LOW | src/core/injections/controller/checks.py | 2120 | except Exception: | CODE |
| LOW | src/core/injections/controller/checks.py | 2138 | except Exception: | CODE |
| LOW | src/core/injections/controller/checks.py | 2213 | except Exception as err: | CODE |
| LOW | src/core/injections/controller/checks.py | 2280 | except Exception: | CODE |
| LOW | src/core/injections/controller/checks.py | 2420 | except Exception: | CODE |
| LOW | src/utils/update.py | 105 | except Exception as err_msg: | CODE |
| LOW | src/utils/update.py | 183 | except Exception as err_msg: | CODE |
| LOW | src/utils/common.py | 54 | except Exception as err_msg: | CODE |
| MEDIUM | src/utils/common.py | 47 | def safe_input(message): | CODE |
| MEDIUM | src/utils/session_handler.py | 149 | def clear(url): | CODE |
| MEDIUM | src/utils/session_handler.py | 188 | def import_injection_points(url, technique, injection_type, filename, separator, | CODE |
| 13 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/core/main.py | 402 | def check_value_inside_boundaries(url, http_request_method): | CODE |
| LOW | src/core/tamper/uninitializedvariable.py | 41 | def add_uninitialized_variable(payload): | CODE |
| LOW | src/core/requests/stability.py | 26 | def reset_connection_error_budget(): | CODE |
| LOW | src/core/requests/stability.py | 32 | def should_retry_connection_error(err): | CODE |
| LOW | src/core/requests/stability.py | 44 | def connection_error_budget_exhausted(): | CODE |
| LOW⚡ | src/core/requests/parameters.py | 236 | def register_custom_injection_marker(vuln_parameter, value_with_marker): | CODE |
| LOW⚡ | src/core/requests/parameters.py | 391 | def configure_post_data_format(parameter, http_request_method): | CODE |
| LOW | src/core/requests/parameters.py | 68 | def extract_vuln_param_from_pairs(text, delimiter, strip_leading_space=False, check_base64_padding=False): | CODE |
| LOW | src/core/requests/parameters.py | 275 | def json_nested_leaf_candidates(fragment, full_parameter): | CODE |
| LOW | src/core/requests/parameters.py | 454 | def handle_single_post_parameter(parameter, multi_parameters, http_request_method): | CODE |
| LOW | src/core/requests/parameters.py | 510 | def handle_multiple_post_parameters(parameter, multi_parameters, http_request_method): | CODE |
| LOW | src/core/requests/parameters.py | 825 | def specify_header_injection_parameter(header_value, header_name): | CODE |
| LOW | src/core/requests/parameters.py | 848 | def specify_user_agent_parameter(user_agent): | CODE |
| LOW | src/core/requests/parameters.py | 854 | def specify_referer_parameter(referer): | CODE |
| LOW | src/core/requests/parameters.py | 866 | def specify_custom_header_parameter(custom_header_value): | CODE |
| LOW⚡ | src/core/requests/requests.py | 166 | def _measure_response_time_with_auth_handling(url, http_request_method): | CODE |
| LOW | src/core/requests/requests.py | 148 | def quick_response_time_sample(url, http_request_method): | CODE |
| LOW | src/core/requests/requests.py | 345 | def _finish_response_time_estimate(diff, timesec): | CODE |
| LOW | src/core/requests/requests.py | 900 | def application_identification(url, response=None): | CODE |
| LOW | src/core/requests/requests.py | 983 | def technology_identification(response): | CODE |
| LOW | …/injections/blind/techniques/time_based/tb_payloads.py | 244 | def cmd_execution_alter_shell(separator, cmd, output_length, timesec, http_request_method): | CODE |
| LOW | …ctions/results_based/techniques/classic/cb_payloads.py | 129 | def cmd_execution_alter_shell(separator, TAG, cmd): | CODE |
| LOW | …ons/results_based/techniques/eval_based/eb_payloads.py | 199 | def cmd_execution_alter_shell(separator, TAG, cmd): | CODE |
| LOW⚡ | src/core/injections/controller/controller.py | 94 | def init_http_header_injection_status(): | CODE |
| LOW⚡ | src/core/injections/controller/controller.py | 103 | def init_cookie_injection_status(): | CODE |
| LOW⚡ | src/core/injections/controller/controller.py | 109 | def check_for_stored_sessions(url, check_parameter, http_request_method): | CODE |
| LOW | src/core/injections/controller/controller.py | 172 | def command_injection_heuristic_basic(url, http_request_method, check_parameter, the_type, header_name, inject_http_head | CODE |
| LOW | src/core/injections/controller/controller.py | 217 | def code_injections_heuristic_basic(url, http_request_method, check_parameter, the_type, header_name, inject_http_header | CODE |
| LOW | src/core/injections/controller/controller.py | 255 | def classic_command_injection_technique(url, timesec, filename, http_request_method): | CODE |
| LOW | src/core/injections/controller/controller.py | 272 | def dynamic_code_evaluation_technique(url, timesec, filename, http_request_method): | CODE |
| LOW | src/core/injections/controller/controller.py | 290 | def timebased_command_injection_technique(url, timesec, filename, http_request_method, url_time_response): | CODE |
| LOW | src/core/injections/controller/controller.py | 307 | def filebased_command_injection_technique(url, timesec, filename, http_request_method, url_time_response): | CODE |
| LOW | src/core/injections/controller/controller.py | 331 | def check_parameter_in_http_header(check_parameter): | CODE |
| LOW | src/core/injections/controller/controller.py | 406 | def attempt_skip_testable_value(url, http_request_method, check_parameter): | CODE |
| LOW | src/core/injections/controller/controller.py | 767 | def filtered_testable_parameters(): | CODE |
| LOW | src/core/injections/controller/handler.py | 192 | def probe_skip_testable_value_post_detection(separator, timesec, http_request_method, url, vuln_parameter, whitespace, u | CODE |
| LOW | src/core/injections/controller/handler.py | 531 | def do_results_based_proccess(url, timesec, filename, http_request_method, injection_type, technique): | CODE |
| LOW⚡ | src/core/injections/controller/checks.py | 1660 | def enable_all_enumeration_options(): | CODE |
| LOW⚡ | src/core/injections/controller/checks.py | 1801 | def tamper_dep_eval_incompatible(tamper_name): | CODE |
| LOW⚡ | src/core/injections/controller/checks.py | 1806 | def tamper_dep_time_related_only(tamper_name): | CODE |
| LOW⚡ | src/core/injections/controller/checks.py | 1811 | def tamper_dep_alter_shell_incompatible(tamper_name): | CODE |
| LOW⚡ | src/core/injections/controller/checks.py | 1818 | def tamper_restore_ignored_words(payload, obf_char): | CODE |
| LOW | src/core/injections/controller/checks.py | 125 | def injection_techniques_status(): | CODE |
| LOW | src/core/injections/controller/checks.py | 216 | def process_custom_injection_data(data): | CODE |
| LOW | src/core/injections/controller/checks.py | 238 | def custom_injection_marker_character(url, http_request_method): | CODE |
| LOW | src/core/injections/controller/checks.py | 451 | def handle_detection_interrupt(filename, url): | CODE |
| LOW | src/core/injections/controller/checks.py | 521 | def handle_exploitation_interrupt(filename, url): | CODE |
| LOW | src/core/injections/controller/checks.py | 803 | def ignore_anticsrf_parameter(parameter): | CODE |
| LOW | src/core/injections/controller/checks.py | 815 | def ignore_google_analytics_cookie(cookie): | CODE |
| LOW | src/core/injections/controller/checks.py | 825 | def sanitize_payload_newlines(payload): | CODE |
| LOW | src/core/injections/controller/checks.py | 975 | def check_for_false_positive_result(false_positive_warning): | CODE |
| LOW | src/core/injections/controller/checks.py | 1113 | def procced_with_file_based_technique(): | CODE |
| LOW | src/core/injections/controller/checks.py | 1132 | def check_reverse_tcp_options(reverse_tcp_option): | CODE |
| LOW | src/core/injections/controller/checks.py | 1480 | def error_loading_session_file(): | CODE |
| LOW | src/core/injections/controller/checks.py | 1499 | def time_delay_due_to_unstable_request(timesec): | CODE |
| LOW | src/core/injections/controller/checks.py | 1553 | def record_baseline_response_time(exec_time): | CODE |
| LOW | src/core/injections/controller/checks.py | 1561 | def warm_up_response_baseline(url, http_request_method): | CODE |
| LOW | src/core/injections/controller/checks.py | 1639 | def identified_http_auth_type(auth_type): | CODE |
| LOW | src/core/injections/controller/checks.py | 1685 | def check_provided_parameters(): | CODE |
| LOW | src/core/injections/controller/checks.py | 2070 | def decoded_text_is_plausible(text): | CODE |
| 16 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/core/main.py | 456 | # Define the level of tests to perform. | COMMENT |
| MEDIUM | src/core/main.py | 703 | # Define the level of verbosity. | COMMENT |
| MEDIUM | src/core/main.py | 993 | # Define the local path where Metasploit Framework is installed. | COMMENT |
| MEDIUM⚡ | src/core/requests/authentication.py | 114 | # Define the HTTP authentication type. | COMMENT |
| MEDIUM⚡ | src/core/requests/authentication.py | 120 | # Define the authentication wordlists for usernames / passwords. | COMMENT |
| MEDIUM⚡ | src/core/requests/parameters.py | 249 | # Define the vulnerable parameter | COMMENT |
| MEDIUM | src/utils/logs.py | 83 | # Create the logs filename | COMMENT |
| MEDIUM | src/utils/session_handler.py | 169 | # Create a comma-separated string of ids to keep | COMMENT |
| MEDIUM | src/utils/session_handler.py | 194 | # Create the table if it does not exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/core/requests/parameters.py | 44 | CODE | |
| LOW | src/utils/settings.py | 108 | CODE | |
| LOW | src/utils/settings.py | 113 | CODE | |
| LOW | src/utils/settings.py | 118 | CODE | |
| LOW | src/utils/settings.py | 123 | CODE | |
| LOW | src/utils/settings.py | 128 | CODE | |
| LOW | src/utils/settings.py | 133 | CODE | |
| LOW | src/utils/settings.py | 148 | CODE | |
| LOW | src/utils/settings.py | 153 | CODE | |
| LOW | src/utils/settings.py | 158 | CODE | |
| LOW | src/utils/settings.py | 163 | CODE | |
| LOW | src/utils/settings.py | 168 | CODE | |
| LOW | src/utils/settings.py | 173 | CODE | |
| LOW | src/utils/settings.py | 178 | CODE | |
| LOW | src/utils/settings.py | 183 | CODE | |
| LOW | src/utils/settings.py | 188 | CODE | |
| LOW | src/utils/settings.py | 192 | CODE | |
| LOW | src/utils/settings.py | 197 | CODE | |
| LOW | src/utils/settings.py | 202 | CODE | |
| LOW | src/utils/settings.py | 207 | CODE | |
| LOW | src/utils/settings.py | 212 | CODE | |
| LOW | src/utils/settings.py | 217 | CODE | |
| LOW | src/utils/settings.py | 222 | CODE | |
| LOW | src/thirdparty/beautifulsoup/beautifulsoup.py | 1103 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/utils/update.py | 41 | process = subprocess.Popen("git reset --hard HEAD && git clean -fd && git pull", shell=True, stdout=subprocess.PIPE, | CODE |
| HIGH | src/utils/requirements.py | 26 | subprocess.Popen(requirement, stdout=null, stderr=null) | CODE |
| HIGH | src/utils/settings.py | 1099 | JSON_RECOGNITION_REGEX = r'(?s)\A(\s*\[)*\s*\{.*"[^"]+"\s*:\s*("[^"]*"|\d+|true|false|null).*\}\s*(\]\s*)*\Z' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ons/results_based/techniques/eval_based/eb_injector.py | 41 | # eof | COMMENT |
| LOW | src/thirdparty/beautifulsoup/beautifulsoup.py | 741 | # we enclose it in single quotes. | COMMENT |
| LOW | src/thirdparty/beautifulsoup/beautifulsoup.py | 1441 | # reference or an HTML entity reference. Nonetheless, | COMMENT |
| LOW | src/thirdparty/beautifulsoup/beautifulsoup.py | 1741 | pass | COMMENT |
| LOW | src/thirdparty/six/__init__.py | 1 | # Copyright (c) 2010-2020 Benjamin Peterson | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/thirdparty/beautifulsoup/beautifulsoup.py | 1458 | # haven't already gone through a supposedly comprehensive | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/utils/sgmllib.py | 22 | __all__ = ["SGMLParser", "SGMLParseError"] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/core/injections/controller/checks.py | 2383 | def process_data(data_type, http_request_method): | CODE |