You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* The default wordlists are basic. You can pass custom ones using cmdline arguments
26
+
* The default wordlists are basic / kali ones. You can pass custom ones using cmdline arguments
27
27
* A good source for wordlists: https://github.com/danielmiessler/SecLists
28
28
29
29
### Subdomain Scan (`dns`)
@@ -41,6 +41,7 @@ Iterates over a wordlist and probes (in a brute manner) different endpoints by a
41
41
A result is considered successful if the request status code is one of the following: `200`, `301`, `302`. If a forbidden status code is returned (`403`) and `403bypass` scan is enabled, further probing takes place where different kind of methods are attempted in order to bypass the forbidden status. Those attempts are also considered as success only if they manage to retrieve one of the aformentioned successful status code. <br>
42
42
43
43
* In order to use a custom wordlist, "--set-contentscan-wl" argument should be passed, followed by the path
44
+
* The default wordlist used here is dirbuster's `directory-list-2.3-medium.txt` list, which is also located under `/usr/share/wordlists/dirbuster`
44
45
45
46
### Bypass403 (`403bypass`)
46
47
@@ -60,9 +61,6 @@ Performs a simple NMAP scan on the host target.
60
61
### Results
61
62
For each hostname, a directory is created with the hostname as its name. Inside the directory, subdirectories are created with the full name of the subdomain and hostname. (each subdomain has its own subdirectory). </br>
62
63
Total results and subdomain scan results are saved in a `.txt` file inside the main hostname directory. <br>
* The default path for results is the current working directory. It can be changed by passing the path following the argument: `--set-results-directory`
80
78
81
79
### Cache
82
-
By default, cache is enabled. Cache files that are older than 30 minutes would be disregarded.
80
+
By default, cache is disabled. Cache files that are older than 30 minutes would be disregarded. </br>
81
+
This can be useful for long runs that have the potential of crashing midway.
83
82
84
-
* It is possible to disable cache by passing the following argument: `--disable-cache`
83
+
* It is possible to enable cache by passing the following argument: `-c / --cache`
85
84
86
85
### Exceptions
87
86
No exceptions (other than the ones handled inside the code) are allowed. Any other exception would be logged under `error log` and abort the scan. </br>
0 commit comments