ImCurvin is an open source, server friendly web security auditing tool built entirely on Termux for detecting environment misconfigurations, probing backend vulnerabilities, etc. It offers 3 modes: Default, Risk, and Defiance. Its peak performance lies in Defiance Mode powered by a dual vector parallel attack sequence that executes synchronized multi threaded MySQL time-based injections while rotating multi-IP TOR circuits per request, and more! Check the repo to see the rest.
No reviews yetBe the first to leave a review for ImCurvin'
Maker
📌
Hello Product Hunt community!
I developed ImCurvin' purely as a hobby because I enjoy Programming. I just started learning coding 6 months ago and jumped into cybersecurity 2 weeks ago. My PC has been dead for months, so I build this tool on a smartphone screen using Termux and GitHub (which definitely made my eyes "burn").
As mentioned in the description, there is a lot more under the hood. I couldn't fit all the features in the main text!The tool is completely open source. Since every character was typed on a mobile screen, there might be some bugs.
If you analyze the code and find any bugs, your reports and Pull Requests on Github are highly respected and welcome!
Let me know your thoughts and feedback!
Report
How does Defiance Mode handle TOR circuit rotation latency without slowing down the parallel MySQL injections, and does it auto-block if a circuit fails mid-sequence?
Report
Maker
@elifsutcea Hello Elifsu! To answer your question,
I export multiple active TOR ports simultaneously (9050 9052, and more). When Defiance Mode spawns parallel MySQL threads, the Bash randomly distributes the outbound requests across these 6 distinct circuits. This load balances the network traffic and completely bypasses the typical single circuit TOR bottleneck.
As for a circuit failure mid sequence, the engine monitors the HTTP status code (like 403 or 429). If a specific port gets "shadowbanned" or drops, Netcat immediately triggers a "SIGNAL NEWNYM" control command to force a fresh IP rotation on that individual circuit within 1 second, while the remaining active ports safely continue the injection stream without interrupting the entire auditing session.
And I guess theres more to it, but these two really answer your question!
Report
love how lean you kept the whole thing by sticking to Termux only, that constraint usually forces ugly workarounds but your parallel TOR circuit rotation per request feels really polished for a setup this lightweight.
Report
Maker
@ylmaz5plh Thanks! I can't even use a PC keyboard properly. I've become so used to coding on my phone that I'm actually terrible at using a PC keyboard now. Yes, I just can't use a physical keyboard properly. That's why i hate to use a PC for now.
Report
Ran it on a test box and Defiance Mode actually pulled results from a hardened setup I thought was solid, the synced tor rotation kept things stable. Curious how it holds up against bigger targets.
Report
Maker
@onurmuhtarkxgm Thanks for the appreciation! To be honest, I'm not entirely sure if this tool can break into even bigger targets yet. But I definitely hope so! Thanks again for the support!
Report
ran it on an old test box and the dual vector MySQL injections actually pulled data i didnt expect to find, pretty wild for something that lives in Termux. setup was rough but worth it.
Report
Maker
@smeyyezgnf1zn Thank you so much for the appreciation! I've actually learned and practiced coding entirely on my phone from day one up until now. This thing forced me to keep the framework stable. Thanks again for the solid support, it means a lot! And if you want, feel free to leave a star on my repo!
Report
Maker
Hey everyone, thanks for the awesome feedback and for testing the framework!
If ImCurvin successfully bypassed your setup or if you find ituseful, please consider dropping a "star" on the GitHub repository to support the project.
Also, feel free to share your technical feedback, bug reports, or feature ideas directly in the GitHub Discussions tab so we can build it better together!
How does Defiance Mode handle TOR circuit rotation latency without slowing down the parallel MySQL injections, and does it auto-block if a circuit fails mid-sequence?
love how lean you kept the whole thing by sticking to Termux only, that constraint usually forces ugly workarounds but your parallel TOR circuit rotation per request feels really polished for a setup this lightweight.
Ran it on a test box and Defiance Mode actually pulled results from a hardened setup I thought was solid, the synced tor rotation kept things stable. Curious how it holds up against bigger targets.
ran it on an old test box and the dual vector MySQL injections actually pulled data i didnt expect to find, pretty wild for something that lives in Termux. setup was rough but worth it.