Zeebsploit – Information gathering, Scanning, and Exploitation tool
Zeebsploit tool is an automated tool that helps the tester or bug bounty hunter in the phases of Information Gathering Scanning and also in Exploitation. Zeebsploit tool can gather information like CMS Info, WHOIS record, IP geolocation, and many more. The scanning module can scan the target domain for vulnerabilities like XSS, SQLi, File Upload, and many more. The exploitation module consists of various exploits like WordPress content injection (currently exploits only version 4.7 and 4.7.1), WordPress file upload through Revsilder, Learndash, and Showbiz plugins, etc. This tool is a suite and the ease of working is very simple. Zeebsploit tool is developed in the Python language and is available on the Github platform.
Note: Make Sure You have Python Installed on your System, as this is a python-based tool. Click to check the Installation process: Python Installation Steps on Linux
Installation of Zeebsploit Tool on Kali Linux OS
Step 1: Use the following command to install the tool in your Kali Linux operating system.
git clone https://github.com/jaxBCD/Zeebsploit.git
Step 2: Now use the following command to move into the directory of the tool. You have to move in the directory in order to run the tool.
Step 3: You are in the directory of the Zeebsploit. Now you have to install a dependency of the Zeebsploit using the following command.
sudo pip3 install -r requirements.txt
Step 4: All the dependencies have been installed in your Kali Linux operating system.
Working with Zeebsploit Tool on Kali Linux OS
Example 1: Information Gathering Modules/ Footprinting
We will be using a content management system detector in this module.
zsf(footprinting): cms detector
We have got the details of CMS used by the geeksforgeeks.org domain.
Example 2: Scanner Modules
We will be using a cross-site scripting payload scanner in this module.
zsf(scanner): xss scanner
The tool is checking for XSS flaws on the target domain by testing the list of payloads.
Example 3: Exploit Modules
We will be using WordPress content injection version 4.7 and 4.7.1 in this module.
zsf(exploit): wp content injection
Exploits can be used to gain access to the target domain and perform various activities.