filipi86/httpdoomAnalizzatore rapido e multi-thread della superficie d'attacco HTTP che esegue screenshot, ispeziona le risposte e risolve i domini su grandi liste di host per una rapida ricognizione.
HttpDoom - Analizzatore della superficie d'attacco HTTP
Valida grandi superfici d'attacco basate su HTTP in modo molto veloce e affidabile. Ispirato da Aquatone.
Devi avere l'SDK dotnet versione 6+:
$ dotnet pack -c Release -o nupkg
$ dotnet tool install --global --add-source .\nupkg\ httpdoom.console
Disinstallazione:
$ dotnet tool uninstall -g httpdoom.console
La descrizione (--help) della CLI è tutto ciò che devi sapere:
HttpDoom.Console
Minimalist (and VERY fast) HTTP-based attack surface analysis tool
Usage:
HttpDoom.Console [options]
Options:
-H, --headers <headers> Headers to be used in every request
-p, --ports <ports> Default ports for testing (default is 80, 443).
-w, --wordlist <wordlist> (REQUIRED) Path to the wordlist with targets to flyover against
-o, --output <output> Directory to save all the enumerated information
-sR, --screenshot-resolution <screenshot-resolution> If -S, the resolution of the screenshot (default is 1920x1080)
-a, --allow-automatic-redirect If HttpDoom will follow HTTP redirects (default is true)
-S, --screenshot If HttpDoom will take screenshots from the website (default is false)
-v, --verbose If HttpDoom will print errors, only useful for debugging (default is false)
-s, --show-details If HttpDoom will print with details in stdout all the information got (default is false)
-i, --ignore-tls If HttpDoom will ignore invalid TLS for HTTPS requests (default is true)
-r, --resolve Resolve the domain enumerating the nameservers (default is false)
-aL, --max-allowed-redirect <max-allowed-redirect> Set the limit of automatic redirects if -a is true (default is 4)
-T, --timeout <timeout> Set the timeout for HTTP responses (default is 4000)
-t, --threads <threads> Set how many threads will HttpDoom utilize in runtime (default is 4)
--version Show version information
-?, -h, --help Show help and usage information
Le icone del progetto HttpDoom sono realizzate da Freepik da Flaticon. Il codice sorgente è concesso in licenza WTFPL.