Skip to content

A web application attack surface mapping tool. It takes in a list of urls then performs numerous probes

License

Notifications You must be signed in to change notification settings

hueristiq/hqurlscann3r

Repository files navigation

hqurlscann3r

release maintenance open issues closed issues license twitter

A web application attack surface mapping tool. It takes in a list of urls then performs numerous probes

Resources

Features

  • Categorize URLs

    URLs' categories
     - endpoint
     - js {js}
     - style {css}
     - data {json|xml|csv}
     - archive {zip|tar|tar.gz}
     - doc {pdf|xlsx|doc|docx|txt}
     - media {jpg|jpeg|png|ico|svg|gif|webp|mp3|mp4|woff|woff2|ttf|eot|tif|tiff}
    
  • Probe HTTP requests for status_code, content_type, e.t.c

  • For every URL of category endpoint with a query:

Installation

From Binary

You can download the pre-built binary for your platform from this repository's releases page, extract, then move it to your $PATHand you're ready to go.

From Source

hqurlscann3r requires go1.17+ to install successfully. Run the following command to get the repo

go install -v github.com/hueristiq/hqurlscann3r/cmd/hqurlscann3r@latest

From Github

git clone https://github.com/hueristiq/hqurlscann3r.git && \
cd hqurlscann3r/cmd/hqurlscann3r/ && \
go build . && \
mv hqurlscann3r /usr/local/bin/ && \
hqurlscann3r -h

Usage

To display help message for hqurlscann3r use the -h flag:

hqurlscann3r -h
 _                      _                           _____
| |__   __ _ _   _ _ __| |___  ___ __ _ _ __  _ __ |___ / _ __
| '_ \ / _` | | | | '__| / __|/ __/ _` | '_ \| '_ \  |_ \| '__|
| | | | (_| | |_| | |  | \__ \ (_| (_| | | | | | | |___) | |
|_| |_|\__, |\__,_|_|  |_|___/\___\__,_|_| |_|_| |_|____/|_| v1.0.0
          |_|

USAGE:
  hqurlscann3r [OPTIONS]

OPTIONS:
   -c, --concurrency              concurrency level (default: 20)
   -d, --delay                    delay between requests (default: 100ms)
       --follow-redirects         follow redirects (default: false)
       --follow-host-redirects    follow internal redirects i.e, same host redirects (default: false)
       --http-proxy               HTTP Proxy URL
  -iL, --input-list               input urls list
  -nC, --no-color                 no color mode
   -o, --output                   JSON output file (default: ./hqurlscann3r.json)
   -t, --timeout                  HTTP request timeout (default: 10s)
  -ua, --user-agent               HTTP user agent
       --update-params            update params file
   -v, --verbose                  verbose mode

Contribution

Issues and Pull Requests are welcome!

About

A web application attack surface mapping tool. It takes in a list of urls then performs numerous probes

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages