Skip to content

Unknownx007/INJECTION

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 

Repository files navigation

INJECTION ⚔️

A high-performance, protocol-level target parameter audit utility built specifically to discover text fields that accept raw syntax breakout symbols. By automating parallel request vectors, the engine flags characters directly without needing complex manual parameter mapping.

Developed by node: Unknownx007
Presented by DEDSEC COMMUNITY


🎭 System Monolithic Logo & Terminal Humor

  .      ___________________________________ 
  |-----|- - -|''''|''''|''''|''''|''''|'## \_       INJECTION 
  |- -  | cc   6   5   4   3   2   1  ###    _]==----------------------
  |-----|________________________________##/|     DEDSEC COMMUNITY 
        '"""""""""""""""""""""""""""""""""""` 

 ┌─────────────────────────────────────────────────────────────────────────────┐
 │ [💬 DEDSEC SYSTEM HUMOR]:                                                   │
 │ "Why do security nodes hate nature? There are too many bugs inside the      │
 │ system partition loops."                                                    │
 └─────────────────────────────────────────────────────────────────────────────┘

⚡ Core Operational Features

  • 🔍 Automated Field Discovery: Scrapes all hidden token lanes, active submission vectors, and ASP.NET structural identities natively using an advanced DOM analysis engine.
  • 🧪 Multi-Target Parallel Sweeper: Eliminates single-field bottleneck parameters, firing tests simultaneously across every active input lane.
  • 📊 Ultra-Sensitive Variance Analysis: Tracks page response capacity off a standard control baseline down to a single byte, instantly reporting shifts as POSSIBLY VULNERABLE to pinpoint issues directly.
  • 🛡️ Tactical DEDSEC Panel Layout: Rendered entirely inside an optimized dark classic terminal theme (Green, Heavy Green, Yellow, and Alert Red).

⚙️ How It Works (The Logic Matrix)

  1. DOM Scrape Pass: The program reads your target URL and isolates all text fields (mapping complex IDs like ctl00$txtUserName).
  2. Baseline Handshake: It executes a neutral connection pass to capture the original baseline size of the application layout.
  3. Parallel Probing: The prober fires specific raw syntax break symbols (' and ") straight into each field independently while auto-filling mandatory background fields.
  4. Variance Detection: If an input lane accepts raw special characters, the server's internal database processing behavior changes. Even if it blocks visible error printouts, the final page size drifts from the baseline. If a shift of even 1 byte occurs, the engine flags the parameter as SYMBOLS ALLOWED (POSSIBLY VULNERABLE).

🛠️ Installation & Setup

Execute these commands inside your terminal workspace to deploy the script repository:

# Clone the repository package files from your branch
git clone https://github.com/Unknownx007/INJECTION

# Move into the operational directory lane
cd INJECTION

# Grant native script execution hooks privileges
chmod +x injection.py

# Boot the tactical parallel testing engine console
python3 injection.py

⚖️ MIT License

Copyright (c) 2026 Unknownx007

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.


⚠️ Disclaimer

This security software utility package is strictly engineered for defensive code verification, authorized penetration testing assessments, and educational protocol research metrics. Running automation tools against targets without explicit administrative consent parameters is illegal and violates global infrastructure policies. The developer assumes absolute zero responsibility for system anomalies or misuse of this codebase asset lane.

About

An automated DOM-based input prober . Extracts all page fields simultaneously and fires precision syntax breaks. Monitors response drift down to a single byte, instantly flagging unsanitized fields as possibly vulnerable to deeper backend exploits.

Topics

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages