fb11 / opendoor Goto Github PK

View Code? Open in Web Editor NEW

This project forked from stanislav-web/opendoor

0.0 1.0 0.0 6.04 MB

OWASP WEB Directory Scanner

Home Page: https://vk.com/stanislav_web

License: Other

Batchfile 1.24% PowerShell 2.65% Python 96.11%

opendoor's Introduction

OWASP WEB Directory Scanner

Python	Linux	OSX	Windows
2.6		?
2.7		?

This application scans the site directories and find all possible ways to login, index of/ dirs and entry points. The scanning is performed by the dictionary that came with the software. Possiblly to use own dictionaries. This software is written for informational purposes and is an open source product under the GPL license.

Current v3.0.31-rc (20.02.2017)
- Directories - 33702
- Subdomains - 101000

Testing of the software on the commercial systems and organizations is prohibited!

Maintainers

@stanislav-web https://github.com/stanislav-web (Developer)

Install Dependencies

pip install -r requirements.txt
chmod +x opendoor.py

Also, you have to install socksipy package if you'll use socks as proxy

apt-get install python-socksipy

Implements

Changelog (last changes)

_{v3.0.31-rc (20.02.2017)}

- update directories
- fixes for redirects

Basic usage

 python opendoor.py --host http://www.example.com

Help

usage: opendoor.py [-h] [--host HOST] [-p PORT] [-m METHOD] [-t THREADS]
                   [-d DELAY] [--timeout TIMEOUT] [-r RETRIES]
                   [--accept-cookies] [--debug DEBUG] [--tor]
                   [--torlist TORLIST] [--proxy PROXY] [-s SCAN] [-w WORDLIST]
                   [--reports REPORTS] [--random-agent] [--random-list]
                   [--prefix PREFIX] [-i] [--update] [--version] [--examples]

optional arguments:
  -h, --help            show this help message and exit

required named options:
  --host HOST           Target host (ip); --host http://example.com

Application tools:
  --update              Update from CVS
  --version             Get current version
  --examples            Examples of usage

Debug tools:
  --debug DEBUG         Debug level 1 - 3

Request tools:
  -p PORT, --port PORT  Custom port (Default 80)
  -m METHOD, --method METHOD
                        HTTP method (use HEAD as default)
  -d DELAY, --delay DELAY
                        Delay between request's threads
  --timeout TIMEOUT     Request timeout (30 sec default)
  -r RETRIES, --retries RETRIES
                        Max retries to reconnect (default 3)
  --accept-cookies      Accept and route cookies from responses
  --tor                 Using proxylist
  --torlist TORLIST     Path to external proxylist
  --proxy PROXY         Custom permanent proxy server
  --random-agent        Randomize user-agent per request

Sniff tools:
  -i, --indexof         Detect Apache Index of/

Stream tools:
  -t THREADS, --threads THREADS
                        Allowed threads

Wordlist tools:
  -s SCAN, --scan SCAN  Scan type scan=directories or scan=subdomains
  -w WORDLIST, --wordlist WORDLIST
                        Path to external wordlist
  --reports REPORTS     Scan reports (json,std,txt)
  --random-list         Shuffle scan list
  --prefix PREFIX       Append path prefix to scan host

Test

pip install  -r requirements-dev.txt
coverage run --source=src/ setup.py test

Contributors

If you like to contribute to the development of the project in that case pull requests are open for you. Also, you can suggest an ideas and create a task in my track list