CRLFsuite is a quick instrument specifically designed to scan CRLF injection.
Set up
$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py set up
$ crlfsuite -hOptions
Utilization
Single URL scanning:
$ crlfsuite -u "http://testphp.vulnweb.com"A number of URLs scanning:
$ crlfsuite -i targets.txt
from stdin:
Specifying cookies

:
$ crlfsuite -u "http://testphp.vulnweb.com" --cookies "key=val; newkey=newval"Utilizing POST methodology:
$ crlfsuite -i targets.txt -m POST -d "key=val&newkey=newval"Bug report
If You are dealing with some errors or points with this instrument, you’ll be able to open a problem right here:
