
Analisador de superfície de ataque HTTP rápido e multi-thread que captura telas, inspeciona respostas e resolve domínios em grandes listas de hosts para reconhecimento rápido.
HttpDoom - Analisador de superfície de ataque HTTP
Valide grandes superfícies de ataque baseadas em HTTP de forma muito rápida e confiável. Inspirado por Aquatone.
Você deve ter o SDK dotnet na versão 6+:
$ dotnet pack -c Release -o nupkg
$ dotnet tool install --global --add-source .\nupkg\ httpdoom.console
Desinstalação:
$ dotnet tool uninstall -g httpdoom.console
A descrição (--help) da CLI é tudo o que você precisa saber:
HttpDoom.Console
Minimalist (and VERY fast) HTTP-based attack surface analysis tool
Usage:
HttpDoom.Console [options]
Options:
-H, --headers <headers> Headers to be used in every request
-p, --ports <ports> Default ports for testing (default is 80, 443).
-w, --wordlist <wordlist> (REQUIRED) Path to the wordlist with targets to flyover against
-o, --output <output> Directory to save all the enumerated information
-sR, --screenshot-resolution <screenshot-resolution> If -S, the resolution of the screenshot (default is 1920x1080)
-a, --allow-automatic-redirect If HttpDoom will follow HTTP redirects (default is true)
-S, --screenshot If HttpDoom will take screenshots from the website (default is false)
-v, --verbose If HttpDoom will print errors, only useful for debugging (default is false)
-s, --show-details If HttpDoom will print with details in stdout all the information got (default is false)
-i, --ignore-tls If HttpDoom will ignore invalid TLS for HTTPS requests (default is true)
-r, --resolve Resolve the domain enumerating the nameservers (default is false)
-aL, --max-allowed-redirect <max-allowed-redirect> Set the limit of automatic redirects if -a is true (default is 4)
-T, --timeout <timeout> Set the timeout for HTTP responses (default is 4000)
-t, --threads <threads> Set how many threads will HttpDoom utilize in runtime (default is 4)
--version Show version information
-?, -h, --help Show help and usage information
Ícones do projeto HttpDoom feitos por Freepik do Flaticon. O código-fonte está licenciado sob WTFPL.