Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/0xkayala/paramspider
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
https://github.com/0xkayala/paramspider
fuzzing paramspider
Last synced: about 1 month ago
JSON representation
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
- Host: GitHub
- URL: https://github.com/0xkayala/paramspider
- Owner: 0xKayala
- License: gpl-3.0
- Created: 2023-08-28T16:23:19.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-08-28T16:51:58.000Z (over 1 year ago)
- Last Synced: 2024-05-20T21:21:22.498Z (7 months ago)
- Topics: fuzzing, paramspider
- Language: Python
- Homepage: https://github.com/0xKayala/ParamSpider
- Size: 175 KB
- Stars: 79
- Watchers: 2
- Forks: 24
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ParamSpider: Parameter miner for humans
## Key Features:
- Finds parameters from web archives of the entered domain.
- Finds parameters from subdomains as well.
- Gives support to exclude urls with specific extensions.
- Saves the output result in a nice and clean manner.
- It mines the parameters from web archives (without interacting with the target host)
## Usage instructions:
```
Note: Use python 3.7+
$ git clone https://github.com/0xKayala/ParamSpider
$ cd ParamSpider
$ pip3 install -r requirements.txt
$ python3 paramspider.py --domain hackerone.com
```
## Usage options :
```
1 - For a simple scan [without the --exclude parameter]
$ python3 paramspider.py --domain hackerone.com
-> Output ex : https://hackerone.com/test.php?q=FUZZ
2 - For excluding urls with specific extensions
$ python3 paramspider.py --domain hackerone.com --exclude php,jpg,svg
3 - For finding nested parameters
$ python3 paramspider.py --domain hackerone.com --level high
-> Output ex : https://hackerone.com/test.php?p=test&q=FUZZ
4 - Saving the results
$ python3 paramspider.py --domain hackerone.com --exclude php,jpg --output hackerone.txt
5 - Using with a custom placeholder text (default is FUZZ), e.g. don't add a placeholder
$ python3 paramspider.py --domain hackerone.com --placeholder FUZZ2
6 - Using the quiet mode (without printing the URLs on screen)
$ python3 paramspider.py --domain hackerone.com --quiet
7 - Exclude subdomains [for parameters from domain+subdomains, do not specify this argument]
$ python3 paramspider.py --domain hackerone.com --subs False
```
## ParamSpider + GF (for massive pwnage)
Let's say you have already installed ParamSpider and now you want to filter out the juicy parameters from plethora of parameters. No worries you can easily do it using [GF(by tomnomnom)](https://github.com/tomnomnom/gf) .
**Note** : Make sure you have [go](https://golang.org/doc/install) properly installed on your machine .
**Follow along this:**
```
$ go get -u github.com/tomnomnom/gf
$ cp -r $GOPATH/src/github.com/tomnomnom/gf/examples ~/.gf
Note: Replace '/User/levi/go/bin/gf' with the path where gf binary is located in your system.
$ alias gf='/User/levi/go/bin/gf'
$ cd ~/.gf/
Note: Paste JSON files(https://github.com/0xKayala/ParamSpider/tree/master/gf_profiles) in ~/.gf/ folder
Now run ParamSpider and navigate to the output directory
$ gf redirect domain.txt //for potential open redirect/SSRF parameters
$ gf xss domain.txt //for potential xss vulnerable parameters
$ gf potential domain.txt //for xss + ssrf + open redirect parameters
$ gf wordpress domain.txt //for wordpress urls
[More GF profiles to be added in future]
```
## Example :
```
$ python3 paramspider.py --domain bugcrowd.com --exclude woff,css,js,png,svg,php,jpg --output bugcrowd.txt
```
### Note :
```
As it fetches the parameters from web archive data,
so chances of false positives are high.
```
## Contributing to ParamSpider:
- Report bugs, missing best practices
- Shoot my [DM](https://twitter.com/0xAsm0d3us) with new ideas
- Make more GF profiles (.json files)
- Help in Fixing bugs
- Submit Pull requests
### My Twitter :
**Say hello** : [0xAsm0d3us](https://twitter.com/0xAsm0d3us)