wirewrench
| Crates.io | wirewrench |
| lib.rs | wirewrench |
| version | 1.1.2 |
| created_at | 2025-07-07 20:27:23.231955+00 |
| updated_at | 2025-12-09 21:20:53.135638+00 |
| description | A Command-Line Utility for Web Shell Interaction via URL-Based Injection |
| homepage | |
| repository | https://github.com/amrosia/wirewrench |
| max_upload_size | |
| id | 1741728 |
| size | 95,982 |
(amrosia)
documentation
README
WireWrench
Instead of manually modifying the URL each time a command needs to be executed, and having to URL encode characters, WireWrench automates the injection process, allowing pentesters to focus on payloads and responses rather than repetitive typing.
Comparison (curl vs wirewrench)
Features
- Command injection automation through URL parameter manipulation
- URL-safe encoding of special characters automatically handled
- REPL-style interface with:
- Command history navigation
- Tab completion support
- Graceful exit handling
- Structured error reporting and diagnostics
- Custom injection point markers
Use Cases
-
Testing PHP, custom, GET web shells.
-
Automating repeated payload injection in parameter-based command injections.
Examples
# Default injection point ("BLUB")
ww https://target.com/shell.php?cmd=BLUB
# Custom injection marker ("INJECT")
ww -i INJECT https://target.com/panel.php?exec=INJECT
Installation
Currently WireWrench is only available with cargo or downloading the binary from Releases
Using cargo
cargo install wirewrench