HawkScan下載 - HawkScan源代碼下載

HawkScan

網站數據

1.0.0

下載

鷹隊

alt標籤

在網站上收集偵察和信息的安全工具。（Python 3.x）

消息
安裝
特殊功能
托多
用法
樣本
謝謝
捐贈
使用的工具
Wiki

新聞v2.x

 - Add proxy function
- Redefining priorities/tasks
- Let's debug certificate subdomains results
- Display the current bypass number during scan ("CB:")
- Easter egg for xmas :)
- Option -nfs (not first step) to pass the first recon steps
- Google CSE before scan
- Creation of WIKI
- Detecting potential path disclosure into html webpage
- Detecting potential hidden directory

（有關更多詳細信息，請在changelog.md上使用）

安裝


       - git clone https://github.com/c0dejump/HawkScan.git && sudo python3 HawkScan/setup.py install
       
       - pip(3) install -r requirements.txt 
    
       - python3 -m pip install -r requirements.txt

特殊功能

掃描之前

在 - 掃描之後

托多

P1是最重要的

[WIP]多個排除類似： - 隔離403,1337b [P1] [正在進行中]（請參閱榜樣）
[WIP]匿名路由通過某些代理（HTTP/S代理列表）[P1] [IN進行] [WIP]重建響應掃描[P1] [P1] [WIP] Hexhttp替換“標頭信息”，然後掃描之前

異步而不是線程？ [PX]
添加CRT.SH檢查潛在的隱藏子域（使用letdebug模塊？）[PX]
將結果推入DB [P2]
如果將帶有現有文件夾的網站重新掃描，只需將掃描示例掃描到文件夾中（喜歡）//有趣嗎？ [P2]
預先檢查WAF敏感的（由40個線程的代理）//添加代理效果[P2]
檢查源代碼並驗證github中的洩漏或敏感數據//其他工具？ [P3]
掃描API端點/信息洩漏[P3]

用法

     
    usage: hawkscan.py [-h] [-u URL] [-f FILE_URL] [-t THREAD] [--exclude EXCLUDE [EXCLUDE ...]] [--auto] [--update] [-w WORDLIST] [-b [BACKUP ...]] [-p PREFIX] [-H HEADER_] [-a USER_AGENT] [--redirect] [--auth AUTH] [--timesleep TS] [--proxie PROXIE] [-r] [-s SUBDOMAINS] [--js] [--nfs] [--ffs] [--notify] [-o OUTPUT] [-of OUTPUT_TYPE]

 > General:
    -u URL                URL to scan [required]
    -f FILE_URL           file with multiple URLs to scan
    -t THREAD             Number of threads to use for URL Fuzzing. Default: 30
    --exclude EXCLUDE [EXCLUDE ...] Exclude page, response code, response size. (Exemples: --exclude 500,337b)   
    --auto                Automatic threads depending response to website. Max: 30
    --update              For automatic update
    --lightmode           For a just simple fuzzing 1 request per second & a new session for each request


> Wordlist Settings:
    -w WORDLIST           Wordlist used for Fuzzing the desired webite. Default: dichawk.txt     
    -b                    Adding prefix/suffix backup extensions during the scan. (Exemples: exemple.com/~ex/, exemple.com/ex.php.bak...) /! beware, take more longer
    -p PREFIX             Add prefix in wordlist to scan

> Request Settings:             
    -H HEADER_            Modify header. (Exemple: -H "cookie: test")    
    -a USER_AGENT         Choice user-agent. Default: Random    
    --redirect            For scan with redirect response (301/302)      
    --auth AUTH           HTTP authentification. (Exemples: --auth admin:admin)               
    --timesleep TS        To define a timesleep/rate-limit if app is unstable during scan.

> Tips:            
    -r                    Recursive dir/files      
    -s SUBDOMAINS         Subdomain tester         
    --js                  For try to found keys, token, sensitive endpoints... in the javascript page
    --nfs                 Not the first step of scan during the first running (waf, vhosts, wayback etc...)    
    --ffs                 Force the first step of scan during the first running (waf, vhosts, wayback etc...)              
    --notify              For receveid notify when the scan finished (only work on linux)

> Export Settings:                    
    -o OUTPUT             Output to site_scan.txt (default in website directory)     
    -of OUTPUT_TYPE       Output file format. Available formats: json, csv, txt

例子

    //Basic
     python hawkscan.py -u https://www.exemple.com/

    //With specific dico
     python hawkscan.py -u https://www.exemple.com/ -w dico_extra.txt

    //with 30 threads
     python hawkscan.py -u https://www.exemple.com/ -t 30

    //With backup files scan
     python hawkscan.py -u https://www.exemple.com/ -b

    //With an exclude page
     python hawkscan.py -u https://www.exemple.com/ --exclude profile.php

    //With an exclude response code
     python hawkscan.py -u https://www.exemple.com/ --exclude 403

    //With an exclude bytes number
     python hawkscan.py -u https://www.exemple.com/ --exclude 1337b 

    //With two excludes type
     python hawkscan.py -u https://www.exemple.com/ --exclude 1337b,403

謝謝

Layno（https://github.com/clayno/）[技術助手]
sanguinarius（https://twitter.com/sanguinarius_bt）[技術助手]
JAMB0N69（https://twitter.com/jamb0n69）[技術幫手]
cyber_ph4ntom（https://twitter.com/__ph4ntom__）[beta tester＆徽標圖形師]