ImCurvin'
Web security audit tool with advanced evasion modes.
7 followers
Web security audit tool with advanced evasion modes.
7 followers
ImCurvin is an open source, server friendly web security auditing tool built entirely on Termux for detecting environment misconfigurations, probing backend vulnerabilities, etc. It offers 3 modes: Default, Risk, and Defiance. Its peak performance lies in Defiance Mode powered by a dual vector parallel attack sequence that executes synchronized multi threaded MySQL time-based injections while rotating multi-IP TOR circuits per request, and more! Check the repo to see the rest.
How does Defiance Mode handle TOR circuit rotation latency without slowing down the parallel MySQL injections, and does it auto-block if a circuit fails mid-sequence?
love how lean you kept the whole thing by sticking to Termux only, that constraint usually forces ugly workarounds but your parallel TOR circuit rotation per request feels really polished for a setup this lightweight.
Ran it on a test box and Defiance Mode actually pulled results from a hardened setup I thought was solid, the synced tor rotation kept things stable. Curious how it holds up against bigger targets.
ran it on an old test box and the dual vector MySQL injections actually pulled data i didnt expect to find, pretty wild for something that lives in Termux. setup was rough but worth it.