Skip to content
đź”­Lightweight URL fuzzer: Discover a web server's undisclosed files, directories and VHOSTs
Go Other
  1. Go 99.8%
  2. Other 0.2%
Branch: master
Clone or download
liamg Merge pull request #10 from liamg/liamg-add-supplementary-checks
Add supplementary checks for backup extensions
Latest commit 96d3bd7 Jan 12, 2020
Type Name Latest commit message Commit time
Failed to load latest commit information.
cmd/scout Remove status code from VHOST output Jan 12, 2020
pkg Add supplementary checks for backup extensions Jan 12, 2020
scripts Add vhost scanning Jan 12, 2020
.gitignore Add vhost scanning Jan 12, 2020
demo.png add README detail and install script Dec 16, 2019


Travis Build Status

Scout is a URL fuzzer for discovering undisclosed VHOSTS, files and directories on a web server.

A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire!


  scout [command]

Available Commands:
  help        Help about any command
  url         Discover URLs on a given web server.
  vhost       Discover VHOSTs on a given web server.

  -d, --debug             Enable debug logging.
  -h, --help              help for scout
  -n, --no-colours        Disable coloured output.
  -p, --parallelism int   Parallel routines to use for sending requests. (default 10)
  -k, --skip-ssl-verify   Skip SSL certificate verification.
  -w, --wordlist string   Path to wordlist file. If this is not specified an internal wordlist will be used.

Use "scout [command] --help" for more information about a command.

Discover URLs

$ scout url
  [+] Target URL
  [+] Routines        10 
  [+] Extensions      php,htm,html 
  [+] Positive Codes  200,302,301,400,403,500,405,204,401,301,302
  Scan complete. 28 results found. 

Discover VHOSTs

$ scout vhost
  [+] Base Domain
  [+] Routines        10 
  [+] IP              -
  [+] Port            - 
  [+] Using SSL       true
  Scan complete. 12 results found.


curl -s "" | bash
You can’t perform that action at this time.