https://github.com/utkusen/socialhunter

crawls the website and finds broken social media links that can be hijacked
https://github.com/utkusen/socialhunter

bug-bounty bugbounty osint redteam redteaming

Last synced: 3 months ago
JSON representation

crawls the website and finds broken social media links that can be hijacked

• Host: GitHub
• URL: https://github.com/utkusen/socialhunter
• Owner: utkusen
• License: mit
• Created: 2022-04-09T11:18:08.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2022-09-24T22:45:32.000Z (about 2 years ago)
• Last Synced: 2024-06-18T21:33:32.917Z (5 months ago)
• Topics: bug-bounty, bugbounty, osint, redteam, redteaming
• Language: Go
• Homepage:
• Size: 20.5 KB
• Stars: 625
• Watchers: 14
• Forks: 69
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - utkusen/socialhunter - crawls the website and finds broken social media links that can be hijacked (Go)

README

        
# socialhunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attacks. It also can cost a loss of the company's reputation. Broken social media hijack issues are usually accepted on the bug bounty programs.

Currently, it supports Twitter, Facebook, Instagram and Tiktok without any API keys.

[![asciicast](https://asciinema.org/a/wYMVXIHCxxOB3QPWq4Fe8Advn.svg)](https://asciinema.org/a/wYMVXIHCxxOB3QPWq4Fe8Advn)

# Installation

## From Binary

You can download the pre-built binaries from the [releases](https://github.com/utkusen/socialhunter/releases) page and run. For example:

`wget https://github.com/utkusen/socialhunter/releases/download/v0.1.1/socialhunter_0.1.1_Linux_amd64.tar.gz`

`tar xzvf socialhunter_0.1.1_Linux_amd64.tar.gz`

`./socialhunter --help`

## From Source

1. Install Go on your system

2. Run: `go install github.com/utkusen/socialhunter@latest`

# Usage

socialhunter requires 2 parameters to run: 

`-f` : Path of the text file that contains URLs line by line. The crawl function is path-aware. For example, if the URL is `https://utkusen.com/blog`, it only crawls the pages under `/blog` path

`-w` : The number of workers to run (e.g `-w 10`). The default value is 5. You can increase or decrease this by testing out the capability of your system.

# Donation

Loved the project? You can buy me a coffee