USAGE: Once downloaded, extract all the files and run XCodeXploitScanner.exe, insert your dork, Click Dork It and it will collect links from Dork you enter and displays the list. After displaying List, you will be able to conduct SQL injection vulnerability scanning / Local File Inclusion / Cross Site Scripting on the web that is in the list. This tool will send the injection parameters to the web as’ – * /././././././././././././.. / etc / passwd% 00 “>alert (” XSS Xcode Exploit Scanner detected “). If the Web has a bug then the status will appear: www.target.com?blabla.php?=1234: SQLi Vulnerable.

XCode SQLI/LFI/XSS Vulnurable & webshell Scanner. You will be able to conduct SQL injection vulnerability scanning / Local File. (” XSS Xcode Exploit Scanner. A vulnerability, which was classified as critical, was found in Apple Xcode up to 7.1R22. Remove Programs From Vista Start Menu. 0/7.3/8.0R10/8.1R2.

/ etc / passwd% 00 LFI Vulnerable www.target.com?blabla.php?=1234 “>alert (” XXS Xcode Exploit Scanner Detected “) XSS Vulnerable At the status list is detected, you can click Open Vuln Link with Browser to display on your browser This tool also adds webshell hunter, where you can search the web shell C99, R57, C100, ITsecteam_shell, b374k, which had been uploaded by the hackers. Perhaps there are many shortcomings or bugs are not known by the author. Dinosaur Deadlift Program more. But at least this tool you can make it easier to find targets. ================================================================ Credits: Code name:.::XCode Exploit – Vulnurable & webshell Scanner:. Description: – SQLI/LFI/XSS/Webshell Hunter with Google Engine - Compiler: Microsoft Visual Basic 6.0 Author: poni System: Windows 95, 98, XP, Vista, 7 Size: 1,38 mb Update: I`m not sure where will i put it. Just check the sites below ================================================================ Info: XCode Exploit – Vulnurable & webshell Scanner help you to gather the dorks Link from Google. Then you may check the results if its Vulnurable to exploit with SQL injection commands, LFI,and XSS.