## https://sploitus.com/exploit?id=6BC6006F-92E8-5E4D-983A-18D9EC1C7613
Command-Line Arguments
Argument Type Default Description
-u, --url string - Single target URL (mutually exclusive with -f)
-f, --file file path - Target file path, one URL per line (supports # comment lines)
--confirm-sqli flag off After detecting route confusion, confirm SQL injection using multiple methods (time-based → boolean-based → error-based)
-t, --threads integer 10 Concurrent thread count
--timeout integer 20 Per-request timeout in seconds
--retries integer 2 Maximum retries per target; auto-retries on network errors
--proxy string - HTTP/HTTPS proxy address for Burp Suite interception (e.g., http://127.0.0.1:8080)
--config file path - YAML config file path (default: config.yaml in the script directory)
-o, --output string vulnerable.txt Output filename for vulnerable target list
--log file path - Log file path; if unspecified, outputs to stderr only
--no-color flag off Disable colored terminal output
-v, --verbose flag off Verbose mode: show URL/Headers/Body/status code for each request
-q, --quiet flag off Quiet mode: only output vulnerable targets
Usage Examples
# Scan a single target
python wp2shell_check.py -u https://target.com
# Scan single target + confirm SQL injection (multi-method: time-based -> boolean -> error-based)
python wp2shell_check.py -u https://target.com --confirm-sqli
# Batch scan, 20 threads
python wp2shell_check.py -f targets.txt --threads 20
# Batch scan + confirm SQLi + route through Burp proxy
python wp2shell_check.py -f targets.txt --confirm-sqli --proxy http://127.0.0.1:8080
# Batch scan + custom output file + logging + verbose mode
python wp2shell_check.py -f targets.txt -o vuln.txt --log scan.log -v
# Use a custom config file
python wp2shell_check.py -f targets.txt --config my_config.yaml