Home / Analyzer / Bashter / Framework / Linux / Reflected XSS / Scanning / XSS / Bashter - Web Crawler, Scanner, And Analyzer Framework

Bashter - Web Crawler, Scanner, And Analyzer Framework

| Post sponsored by FaradaySEC | Multiuser Pentest Environment

Bashter is a tool for scanning a Web-based Application. Bashter is very suitable for doing Bug Bounty or Penentration Testing. It is designed like a framework so you can easily add a script for detect vulnerability.

For Example
You can add something script like this:
${BASHTER_HOME}/parts/form/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}
${BASHTER_HOME}/parts/url/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}
${BASHTER_HOME}/parts/header/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}
For the sample, you can follow existing scripts.

Disable Script
You only need to change the extension, for example .bash => .xbash.

by Default:
  • Detect Form Input
  • Detect CORS Missconfiguration
  • Detect X-FRAME-OPTIONS missing (Clickjacking Potential)
  • Detect Reflected XSS via URL
  • Detect Reflected XSS via Form

How to Install:

git clone https://github.com/zerobyte-id/Bashter.git
cd Bashter/
bash setup.bash

Contributor:


Bashter - Web Crawler, Scanner, And Analyzer Framework Bashter - Web Crawler, Scanner, And Analyzer Framework Reviewed by Zion3R on 9:47 AM Rating: 5