wirewrench
| Crates.io | wirewrench |
| lib.rs | wirewrench |
| version | 1.1.1 |
| created_at | 2025-07-07 20:27:23.231955+00 |
| updated_at | 2025-07-08 19:45:19.650681+00 |
| description | A Command-Line Utility for Web Shell Interaction via URL-Based Injection |
| homepage | |
| repository | https://github.com/amrosia/wirewrench |
| max_upload_size | |
| id | 1741728 |
| size | 94,011 |
(amrosia)
documentation
README
WireWrench
Instead of manually modifying the URL each time a command needs to be executed, and having to URL encode characters, WireWrench automates the injection process, allowing pentesters to focus on payloads and responses rather than repetitive typing.
Features
- Command injection automation through URL parameter manipulation
- URL-safe encoding of special characters automatically handled
- REPL-style interface with:
- Command history navigation
- Tab completion support
- Graceful exit handling
- Structured error reporting and diagnostics
- Custom injection point markers
Use Cases
-
Testing PHP, custom, GET web shells.
-
Automating repeated payload injection in parameter-based command injections.
Examples
# Default injection point ("BLUB")
ww https://target.com/shell.php?cmd=BLUB
# Custom injection marker ("INJECT")
ww -i INJECT https://target.com/panel.php?exec=INJECT
Installation
Currently WireWrench is only available with cargo or downloading the binary from Releases
Using cargo
cargo install wirewrench