BFAC - Backup File Artifacts Checker

An automated tool that checks for backup artifacts that may discloses the web-application's source code.

              _____   _______  _______  _______
            (  ___ \ (  ____ \(  ___  )(  ____ \
            | (   ) )| (    \/| (   ) || (    \/
            | (__/ / | (__    | (___) || |
            |  __ (  |  __)   |  ___  || |
            | (  \ \ | (      | (   ) || |
            | )___) )| )      | )   ( || (____/\
            |/ \___/ |/       |/     \|(_______/

            -:::Backup File Artifacts Checker:::-
___An automated tool that checks for backup artifacts that may discloses the web-application's source code___
        Author: Mazin Ahmed | <mazin AT mazinahmed DOT net> | @mazen160

Description
BFAC (Backup File Artifacts Checker) is an automated tool that checks for backup artifacts that may discloses the web-application's source code. The artifacts can also lead to the leakage of sensitive information, such as passwords, directory structure,etc...

BFAC goal is to be an all-in-one tool for backup-file artifacts black-box testing.

Usage

Help

    bfac --help   

Check a single URL

    bfac --url http://example.com/test.php   

Check a list of URLs

    bfac --list testing_list.txt   

Check a single URL with a higher level

    bfac --url http://example.com/test.php --level 2   

Check a single URL while specifying values for valid status codes

    bfac --url http://example.com/test.php --valid-status-codes 200,302   

Check a single URL while excluding specific status codes

    bfac --url http://example.com/test.php --invalid-status-codes 302,403,404   

Checking a single URL and showing only the results

    bfac --no-text --url http://example.com/test.php   

Requirements

• Python2 or Python3
• requests

Installation (for *NIX machines) [Optional]

    sudo python install.py confirm   

Compatibility
The project currently supports all platforms that runs Python. The project is compatible with both Python2 and Python3.

Community Contribution
Contribution from the community to the BFAC project is very welcome. If you find a bug, have an idea for a feature, or ideas to reconstruct the code to work better, or anything else, feel free to make an issue ticket or a pull request.

Legal Disclaimer
This project is made for educational and ethical testing purposes only. Usage of BFAC for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

License
The project is currently licensed under GNU GPLv3.0 License.

Author
Mazin Ahmed

• Website: https://mazinahmed.net
• Email: mazin AT mazinahmed DOT net
• Twitter: https://twitter.com/mazen160
• Linkedin: http://linkedin.com/in/infosecmazinahmed