Overview

Bibi Bird is a tool writen in python that tests websites for SQL Injections, XSS and other vulnerabilities. My tool is still in beta but works 90% of the time.

Installation

git clone https://github.com/alfredredbird/Bibi-Bird
cd Bibi-Bird && sudo pip3 install -r requirements.txt
python3 main.py

Manual Install

download the latest release from: https://github.com/alfredredbird/Bibi-Bird/releases.
then extract the zip or tar.gz

cd Bibi-Bird && sudo pip3 install -r requirements.txt
python3 Bibi-Bird

CLI Modes

• SQL injection mode: python3 main.py -u https://target.tld/login -i
• SQL injection with custom wordlist: python3 main.py -u https://target.tld/login -i -w dict/sql-common.txt
• SQL error detection mode: python3 main.py -u https://target.tld/page --sql-detect
• XSS URL mode: python3 main.py -u "https://target.tld/search?" -x 1
• XSS form mode: python3 main.py -u https://target.tld/login -x 2
• CSRF request replay mode: python3 main.py -u https://target.tld -c tests/request.txt -r 25
• Save report output: python3 main.py -u https://target.tld -i --report data/report.json

Tested OS

Operative system	Version
MacOS	Monterey 12.6.7
Windows	11/10
Kali linux	Rolling / Sana
Parrot OS	3.1
Ubuntu	22.04/20.04
Debian	10.00
Alpine	3.10
Fedora	v33
Arch Linux	2021.07.01
Manjaro	21
Void	Rolling Release

Requirements

There Is A Lot Lol

• colorama
• requests
• selenium
• alive_progress
• bs4

Supported Languages

(we need translators)

• English
• Italian
• Hebrew
• Spanish
• French
• Arabic
• German
• Hindi
• Russian
• Portuguese

Upcoming Features

(They Are Great First Issues :D)

• SQL Injections
• SQL Detections
• DNS Scanning
• URL Brute Forcing
• Reports
• XSS Injecting
• Site OSINT
• Custom Wordlists
• Payload Generation
• Payload Selection
• CSRF Attacks (beta)

Need Help?

Check out Bibi-Bird/issues or the WiKi for help. Still Need Help? Contact Below :D

Info:

Wiki	https://github.com/alfredredbird/Bibi-Bird/wiki
Releases	https://github.com/alfredredbird/Bibi-Bird/releases
Contributors	https://github.com/alfredredbird/Bibi-Bird/graphs/contributors

Contact

• Twitter: alfredredbird1
• LinkedIn: jeffrey montanari

Other Tools

Other tools in the fleet:

• Tookie-OSINT: Tookie-OSINT

Partnership

Want to partner with the Bibi-Bird project? Feel free to reach out!

partners:

~ Mrofcodyx - Git-eXpossed