{"id":13563230,"url":"https://github.com/liamg/scout","last_synced_at":"2025-04-05T06:08:08.364Z","repository":{"id":40531465,"uuid":"225147999","full_name":"liamg/scout","owner":"liamg","description":"🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs","archived":false,"fork":false,"pushed_at":"2022-11-22T06:30:54.000Z","size":1609,"stargazers_count":564,"open_issues_count":7,"forks_count":59,"subscribers_count":11,"default_branch":"master","last_synced_at":"2025-03-29T05:07:52.626Z","etag":null,"topics":["fuzzer","hackthebox","pentesting","security","url","url-fuzzer"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"unlicense","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/liamg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null},"funding":{"github":["liamg"]}},"created_at":"2019-12-01T11:10:36.000Z","updated_at":"2025-03-28T20:16:39.000Z","dependencies_parsed_at":"2023-01-22T15:31:23.557Z","dependency_job_id":null,"html_url":"https://github.com/liamg/scout","commit_stats":null,"previous_names":[],"tags_count":31,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/liamg%2Fscout","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/liamg%2Fscout/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/liamg%2Fscout/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/liamg%2Fscout/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/liamg","download_url":"https://codeload.github.com/liamg/scout/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247294539,"owners_count":20915340,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["fuzzer","hackthebox","pentesting","security","url","url-fuzzer"],"created_at":"2024-08-01T13:01:16.628Z","updated_at":"2025-04-05T06:08:08.347Z","avatar_url":"https://github.com/liamg.png","language":"Go","funding_links":["https://github.com/sponsors/liamg"],"categories":["Go","扫描器、资产收集、子域名","Go (531)"],"sub_categories":["网络服务_其他"],"readme":"# Scout\n\n[![Travis Build Status](https://travis-ci.org/liamg/scout.svg?branch=master)](https://travis-ci.org/liamg/scout)\n\nScout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. \n\n\u003cp align=\"center\"\u003e\n  \u003cimg width=\"929\" height=\"502\" src=\"./demo.gif\" /\u003e\n\u003c/p\u003e\n\nA full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire!\n\n## Usage\n\n```bash\n\nUsage:\n  scout [command]\n\nAvailable Commands:\n  help        Help about any command\n  url         Discover URLs on a given web server.\n  version     Display scout version.\n  vhost       Discover VHOSTs on a given web server.\n\nFlags:\n  -d, --debug             Enable debug logging.\n  -h, --help              help for scout\n  -n, --no-colours        Disable coloured output.\n  -p, --parallelism int   Parallel routines to use for sending requests. (default 10)\n  -k, --skip-ssl-verify   Skip SSL certificate verification.\n  -w, --wordlist string   Path to wordlist file. If this is not specified an internal wordlist will be used.\n\n```\n\n### Discover URLs\n\n#### Flags\n\n##### `-x, --extensions`\n\nFile extensions to detect. (default `php,htm,html,txt`])\n\n##### `-f, --filename`\n \nFilename to seek in the directory being searched. Useful when all directories report 404 status.\n\n##### `-H, --header`\n\nExtra header to send with requests e.g. `-H \"Cookie: PHPSESSID=blah\"` \n\n##### `-c, --status-codes`\n\nHTTP status codes which indicate a positive find. (default `200,400,403,500,405,204,401,301,302`)\n\n##### `-m, --method`\n\nHTTP method to use.\n\n##### `-s, --spider`\n\nScan page content for links and confirm their existence.\n\n#### Full example\n\n```bash\n$ scout url http://192.168.1.1\n  \n  [+] Target URL      http://192.168.1.1\n  [+] Routines        10 \n  [+] Extensions      php,htm,html \n  [+] Positive Codes  200,302,301,400,403,500,405,204,401,301,302\n  \n  [302] http://192.168.1.1/css\n  [302] http://192.168.1.1/js\n  [302] http://192.168.1.1/language\n  [302] http://192.168.1.1/style\n  [302] http://192.168.1.1/help\n  [401] http://192.168.1.1/index.htm\n  [302] http://192.168.1.1/image\n  [200] http://192.168.1.1/log.htm\n  [302] http://192.168.1.1/script\n  [401] http://192.168.1.1/top.html\n  [200] http://192.168.1.1/shares\n  [200] http://192.168.1.1/shares.php\n  [200] http://192.168.1.1/shares.htm\n  [200] http://192.168.1.1/shares.html\n  [401] http://192.168.1.1/traffic.htm\n  [401] http://192.168.1.1/reboot.htm\n  [302] http://192.168.1.1/debug\n  [401] http://192.168.1.1/debug.htm\n  [401] http://192.168.1.1/debug.html\n  [401] http://192.168.1.1/start.htm\n  \n  Scan complete. 28 results found. \n\n```\n\n### Discover VHOSTs\n\n```bash\n$ scout vhost https://google.com\n  \n  [+] Base Domain     google.com\n  [+] Routines        10 \n  [+] IP              -\n  [+] Port            - \n  [+] Using SSL       true\n  \n  account.google.com\n  accounts.google.com\n  blog.google.com\n  code.google.com\n  dev.google.com\n  local.google.com\n  m.google.com\n  mail.google.com\n  mobile.google.com\n  www.google.com\n  admin.google.com\n  chat.google.com\n  \n  Scan complete. 12 results found.\n\n```\n\n## Installation\n\n```bash\ncurl -s \"https://raw.githubusercontent.com/liamg/scout/master/scripts/install.sh\" | bash\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fliamg%2Fscout","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fliamg%2Fscout","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fliamg%2Fscout/lists"}