https://github.com/4444tensei/endpointjoiner

通过自定义关键词，模拟生成一切可能存在的接口端点，并进行HTTP端点爆破（测试工具）
https://github.com/4444tensei/endpointjoiner

brute-force endpoint-testing go penetration-testing security

Last synced: 2 months ago
JSON representation

通过自定义关键词，模拟生成一切可能存在的接口端点，并进行HTTP端点爆破（测试工具）

• Host: GitHub
• URL: https://github.com/4444tensei/endpointjoiner
• Owner: 4444TENSEI
• License: mit
• Created: 2024-09-10T19:10:29.000Z (8 months ago)
• Default Branch: main
• Last Pushed: 2024-10-18T15:42:02.000Z (7 months ago)
• Last Synced: 2025-01-24T01:09:25.840Z (4 months ago)
• Topics: brute-force, endpoint-testing, go, penetration-testing, security
• Language: Go
• Homepage:
• Size: 102 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        


EndpointJoiner

HTTP端点爆破(测试工具)



    

    








# 部署

### 拉取项目

```

git clone https://github.com/4444TENSEI/EndpointJoiner

```

### 启动

```

go run main.go

```



# 修改配置文件

### `config.json`示例:

```json

{

    "constituentWord": [

        "song",

        "songs",

        "rank",

        "user"

    ],

    "endWord": [

        "/",

        "/666666",

        "/rank?id=666666"

    ],

    "mutexGroups": {

        "song": [

            "songs"

        ]

    },

    "baseDomains": [

        "https://xxx.xxx.com/api",

        "https://xxx.xxx.com/api/v1",

        "https://xxx.xxx.com/api/v6"

    ],

    "concurrency": 1000

}

```

# 参数说明

|       参数       | 值                                                           |

| :--------------: | :----------------------------------------------------------- |

|      constituentWord      | `字符串`，多个随机值，生成时自动算出所有可能的组合顺序 |

|   endWord   | `字符串`，必定生成在尾部的自定义部分 |

| mutexGroups | `键值对`，定义冲突词，键名与值不会同时出现在最后生成的随机端点中。 |

|     baseDomains     | `字符串`，根域名，尾部不要带``/``斜杠 |

| concurrency | `数值`，并发数，越大越快 |