bfac

BFAC (Backup File Artifacts Checker) is an automated tool that checks for backup artifacts that may disclose the web-application’s source code. The artifacts can also lead to leakage of sensitive information, such as passwords, directory structure, etc.

Name:bfac

Category:Discovery

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/bfac:18fb0b5

Output Type:

License:Unknown

Source:View Source

Parameters

host · string

--hostHTTP host header value

level · string

-levelChoose level

proxy · string

--proxyProxy authentication credentials (name:password).

cookie · string

--cookieHTTP cookie header value

timeout · string

--timeoutHTTP request timeout in seconds (default:5)

url-list · file · required

--listCheck a list of URLs

proxy-file · file

--proxy-fileUse a proxy list file

single-url · string · required

-uCheck a single URL

user-agent · string

-uaHTTP User-Agent header value

request-rate · string

--request-rate-throttlingRequest rate throttling per second (default: 30)

results-only · boolean

--no-textShow the results only

extra-headers · string

--headersExtra headers (e.g. Accept-Language: fr ETag: 123)

dvcs-tests-only · boolean

--dvcs-testLimit the test to exposed DVCS tests

user-agent-file · file

--user-agents-fileUse a User-Agents file

exclude-status-code · string

-xscSpecify status codes to exclude, separated by commas

invalid-content-length · string

--invalid-content-lengthManually specify the invalid Content-Length, instead of performing this check automatically.

verification-technique · string

--techniqueTechnique to verify the availability of the file. (options: status_code, content_length, all) (default: all)

invalid-content-length-offset · string

--invalid-content-length-offsetManually specify the Content-Length offset for invalid pages (default: 50).