Simple Script For Generating Malformed QRCodes. These qrcodes are useful if you want to test some QRCode scanner's parser or how the application handle QRCode data.
Down side of this tool: you need to manually scan codes with camera.
Proof
Installation
What do you need:
- python3
- qrcode
- Pillow
- argparse
Steps
1
git clone https://github.com/h0nus/QRGen
2
cd QRGen
3
pip3 install -r requirements.txt
OR python3 -m pip install -r requirements.txt
4
python3 qrcode.py
5 Enjoy attacking QRCodes :P
Personalization
You can change the default wordlists to what you want by passing -w/--wordlist :) Order of default wordlists group:
- SQL Injection
- XSS
- Command Injection
- Format String
- XXE
- String Fuzzing
- SSI Injection
- LFI/Directory Traversal
- custom passed with -w/--wordlist