Subprober - 用于渗透测试的快速多用途 Http 探测工具

pip install git+https://github.com/sanjai-AK47/Subprober.gitsubprober -h

git clone https://github.com/sanjai-AK47/SubProber.gitcd Subproberpip install .subprober -h

subprober -h       

   _____       __    ____             __               / ___/__  __/ /_  / __ _________  / /_  ___  _____  __ / / / / __ / /_/ / ___/ __ / __ / _ / ___/ ___/ / /_/ / /_/ / ____/ /  / /_/ / /_/ /  __/ /    /____/__,_/_.___/_/   /_/   ____/_.___/___/_/                                                                                                                  @RevoltSecurities

          Subprober - An essential HTTP multi-purpose Probing Tool for Penetration testers

[Description] :

    Subprober is a high-performance tool designed for probing and extract vital information efficiently.

[Options]:

    [INPUT]:

        -f,    --filename              specify the filename containing a list of urls for probing.                                               -u,    --url                   specify a target URL for direct probing        stdin/stdout                   subprober supports both stdin/stdout and enable -nc to pipe the output of subprober                                          [PROBES-CONFIG]:

        -sc,   --status-code           display the response status code        -tl,   --title                 retrieve and display the titles        -sv,   --server                identify and display the server name        -wc,   --word-count            retrieve and display the content length        -l ,   --location              display the redirected location of the response.        -apt,  --application-type      determine and display the application type.        -p,    --path                  specify a path for probe and get results ex: -p admin.php        -px,   --proxy                 specify a proxy to send the requests through your proxy or BurpSuite (ex: http://127.0.0.1:8080)        -gw,   --grep-word             enable The grep word flag will be usefull when grepping partiuclar status codes        -ar,   --allow-redirect        enabling these flag will make Subprober to follow the redirection and ger results        -dhp,  --disable-http-probe    disables the subprober from probing to http protocols and only for https when no protocol is specified        -X  ,  --method                request methods to probe and get response        -H  ,  --header                add a custom headers for probing and -H can be used multiple times to pass multiple header values (ex: -H application/json -H X-Forwarded-Host: 127.0.0.1)        -ra ,  --random-agent          enable Random User-Agent to use for probing (default: subprober/Alpha)        -ip ,  --ip                    find ip address for the host        -cn ,  --cname                 find cname for the host        -maxr, --max-redirection       set a max value to follow redirection (default: 10)        [HEADLESS-Mode]:

        -ss,   --screenshot            enable to take screenshot of the page using headless browsers with asynchronous performance        -st,   --screenshot-timeout    eet a timeout values for taking screenshosts          -br,   --browser-type          select a browser for taking screenshots and browser available: chrome, firefox (default: chrome)                                       and requires chrome driver, gecko driver to be installed    [MATCHERS]:

        -ex,   --exclude               exclude specific response status code(s) from the analysis.        -mc,   --match                 specify specific response status code(s) to include in the analysis.                                          [OUTPUT]:            -o,    --output                define the output filename to store the results of the probing operation.        -das,  ---disable-auto-save    disable the autosave of the results when no output file is specified.        -oD,   --output-directory      define a folder name to save  screenshot outputs.

    [Rate-Limits]:

        -c,    --concurrency           set the concurrency level for subprober (default 50)        -to,   --timeout               set a custom timeout value for sending requests.            [UPDATES]:        -up,   --update                update Subprober to the latest version (pip required to be installed)        -sup,  --show-updates          shows the current version subprober updates     [DEBUG]:

        -h,    --help                  show this help message for you and exit!        -s,    --silent                enable silent mode to suppress the display of Subprober banner and version information.        -v,    --verbose               enable verbose mode to display error results on the console.        -nc,   --no-color              enabling the --no-color will display the output without any CLI colors

https://github.com/RevoltSecurities/SubProber