Light

pushpenderindia / orhunter Goto Github PK

View Code? Open in Web Editor NEW

41.0 41.0 14.0 52 KB

ORhunter is an Open Redirect Vulnerability Scanner which Passively Crawls URLs from 3 Sources & Then Filter Potential URLs based on Parameter Values, then finally hunt them for Unvalidated Open Redirect

License: MIT License

Python 100.00%

orhunter's Introduction

Hi I'm Pushpender Singh!

I'm a Ethical Hacker, Web, Android & Software Developer who just love to code in Python.

Decent in Bash Scripting & also Just Love to Make those things which breaks things.

List of Technologies Which I've Learned so far : )

Category	Skills
Languages
Frameworks
Styling & Frameworks
Database
Services & Tools
IDE & Environment
Hosting
APIs

I've a with more than where I use to share my Cyber Security & Ethical Hacking Knowledge

👨🏽‍💻 I'm Top Rated Freelancer on Upwork (Top 10% Talent).
👨🏽‍💻 Global Quine DevRank Top 1%
🤝 Always open for any type of collaboration.
😊 Willing to contribute in opensource projects.
📫 How to reach me: [email protected] (Telegram: @pushpenderindia)
👨‍💻 How to Hire me : Upwork
💻 Linkedin Profile: Linkedin
🌐 Visit Our Site: Witeso

🔴 Live YouTube Channel Stats (Automatically Updates Every 60 seconds)

🤝 To connect with me

GitHub Stats

Famous Repos

orhunter's People

Contributors

Stargazers

Watchers

Forkers

j3rry-1729 hollow667 agentanthony th3cyb3rc0p mayur1199 subhash0x ayushsinha30 5l1v3r1 therealelyayo ultraflair64gb tamersp25 jnblack81

orhunter's Issues

False positive

Hello,

Utm_page-url=evil.com parameter trigger positive but it's not

Facing some issues with this tool

[>>] Crawling URLS from : WaybackMachine, AlienValut OTX, CommonCrawl ...
Traceback (most recent call last):
File "orhunter.py", line 298, in
final_url_list = crawl.start()
File "orhunter.py", line 64, in start
urls_list2 = self.getOTX_URLs(self.domain)
File "orhunter.py", line 124, in getOTX_URLs
urls_list = raw_urls["url_list"]
KeyError: 'url_list'

This tool is not helpful if the domain is something like this example.de or example.nl

Please modify the tool so that it works on all the domains including example.de or example.nl etc
Currently it is working only for example.com

Stuck need an timeout update.

Scanning got stuck.

=========================================================================
[>>] Crawling URLS from : WaybackMachine, AlienValut OTX, CommonCrawl ...
=========================================================================
[>>] [Total URLs] :  26441
[>>] [Potentially Vulnerable URLs] :  836
[>>] [Unique Potentially Vulnerable URLs] :  114
=========================================================================
[>>] [Total URLs Scanned] : 110/114 | [>>] [Total Error Encountered] : 16

Facing some issues with this tool

File "/home/kali/ORhunter/orhunter.py", line 298, in
final_url_list = crawl.start()
File "/home/kali/ORhunter/orhunter.py", line 59, in start
self.startDeepCommonCrawl()
File "/home/kali/ORhunter/orhunter.py", line 133, in startDeepCommonCrawl
api_list = self.get_all_api_CommonCrawl()
File "/home/kali/ORhunter/orhunter.py", line 148, in get_all_api_CommonCrawl
raw_api = self.make_GET_Request(url, "json")
File "/home/kali/ORhunter/orhunter.py", line 93, in make_GET_Request
response = requests.get(url)
File "/usr/lib/python3/dist-packages/requests/api.py", line 76, in get
return request('get', url, params=params, **kwargs)
File "/usr/lib/python3/dist-packages/requests/api.py", line 61, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 528, in request
prep = self.prepare_request(req)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 456, in prepare_request
p.prepare(
File "/usr/lib/python3/dist-packages/requests/models.py", line 316, in prepare
self.prepare_url(url, params)
File "/usr/lib/python3/dist-packages/requests/models.py", line 384, in prepare_url
raise InvalidURL(*e.args)
requests.exceptions.InvalidURL: Failed to parse: http://index.commoncrawl.org/collinfo.json

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.