Offensive Security

Server-Side Injection Test Pack

Generate LFI/RFI, command injection, SSTI, XXE, and deserialization test cases matched to an authorized test environment, plus an optional SSRF map for a callback IP.

server-side-injection-test-pack6 stepspayloadserverchain

Generates 5 server-side injection payload families sharing one target-OS selection, plus an SSRF map when an authorized callback IPv4 address is supplied.

Tool chain

  1. SSRF Map Generatorssrf-map-generator - optional
  2. LFI / RFI Payload Generatorlfi-payload-generator
  3. Cmd Injection Generatorcmd-injection-generator
  4. SSTI Payload Generatorssti-payload-generator
  5. XXE Payload Generatorxxe-payload-generator
  6. Deserialization Payloadsdeserialization-payloads