-
Notifications
You must be signed in to change notification settings - Fork 14
/
dirscan.py
executable file
ยท161 lines (124 loc) ยท 6.18 KB
/
dirscan.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
#!/usr/bin/env python3
# encoding:utf8
import time
import asyncio
import aiohttp
import argparse
from rich.console import Console
from rich.table import Column, Table
from rich.progress import track
from util.util import *
__author__ = 'nul1'
__date__ = '2020/07/25'
__version__ = 'v0.3'
"""
Dirscan
A simple and fast directory scanning tool for pentesters
"""
TIMEOUT = 4
OUTPUT = "output_{}.txt".format(randomDigits())
WORDFILE = "./wordlist.txt"
HEADERS = {"Cache-Control": "max-age=0", "Upgrade-Insecure-Requests": "1",
"Content-Type": "application/x-www-form-urlencoded",
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3578.98 Safari/537.36",
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9",
"Referer": "https://google.com", "Accept-Encoding": "gzip, deflate",
"Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8,zh-TW;q=0.7,ko;q=0.6",
"Connection": "close"}
console = Console()
table = Table(show_header=True, header_style="bold magenta")
table.add_column("Code")
table.add_column("URL")
table.add_column("Length", justify="right")
def banner():
console.print('''[red]
โโโโโโโ โโโโโโโโโโ โโโโโโโโ โโโโโโโ โโโโโโ โโโโ โโโ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ
โโโ โโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโ โโโ
โโโ โโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโ
โโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโโโโ
โโโโโโโ โโโโโโ โโโโโโโโโโโ โโโโโโโโโโ โโโโโโ โโโโโ
[/red][yellow]code by {0}[/yellow] [blue]{1}[/blue]
'''.format(__author__, __version__))
def word_list(wordfile):
import os.path
if not os.path.isfile(wordfile):
print("[x] The specified dictionary file does not exist!")
exit(1)
with open(wordfile, 'r') as f:
f = [line.rstrip() for line in f.readlines()]
return f
def url_list(urlfile):
with open(urlfile, 'r') as f:
f = [line.rstrip() for line in f.readlines()]
return f
async def get(url, path, sem, verbose):
async with sem:
async with aiohttp.ClientSession(headers=HEADERS) as session:
scan_url = url + path if '://' in url else 'http://' + url + path
try:
r = await session.get(scan_url, timeout=TIMEOUT, allow_redirects=False)
s, l= r.status, len(await r.text())
if verbose == 1:
if s in [200, 301, 302, 401, 403]:
console.print("[cyan]{}[/cyan] -> [red]{}[/red] -> [green]{}[/green]".format(scan_url, s, l))
if s == 200:
table.add_row("[green]{}[/green]".format(s), scan_url, "{}".format(l))
elif s in [301, 302]:
table.add_row("[blue]{}[/blue]".format(s), scan_url, "{}".format(l))
elif s in [401, 403]:
table.add_row("[purple]{}[/purple]".format(s), scan_url, "{}".format(l))
except Exception as e:
pass
async def run(url, wordfile, threads, verbose):
sem = asyncio.Semaphore(threads) # ้ๅถๅนถๅ้
do = [get(url, path, sem, verbose) for path in word_list(wordfile)]
await asyncio.wait(do)
async def run2(urlfile, path, threads, verbose):
sem = asyncio.Semaphore(threads) # ้ๅถๅนถๅ้
do = [get(url, path, sem, verbose) for url in url_list(urlfile)]
await asyncio.wait(do)
def main():
banner()
parser = argparse.ArgumentParser(
usage='\ndirscan -u url -w dict.txt -t 20 -v\ndirscan -U url.txt -p /admin -t 20 -v',
description="็ฎๅฝๆซๆๅทฅๅ
ท",
)
parser.add_argument("-u", dest="url",
help="URL target")
parser.add_argument("-U", dest="urlfile",
help="URL list target")
parser.add_argument("-w", dest="wordlist", type=str, default=WORDFILE,
help="Customize wordlist (default wordlist.txt)")
parser.add_argument("-p", dest="path", type=str, default='/',
help="Request path (default '/')")
parser.add_argument("-t", dest="threads", type=int, default=25,
help="Set thread (default 25)")
parser.add_argument("-v", dest="verbose", action="store_true",
help="show verbose")
args = parser.parse_args()
if args.url is None and args.urlfile is None:
parser.print_help()
exit(0)
start_time = time.time()
loop = asyncio.get_event_loop()
if args.url:
try:
console.print("[blue]Use {} threads to scan {}[/blue]".format(args.threads, args.url))
# ่ฎพ็ฝฎๆฏๅฆๅฑ็คบ่ฏฆ็ป
loop.run_until_complete(run(args.url, args.wordlist, args.threads, 1)) if args.verbose is True else loop.run_until_complete(run(args.url, args.wordlist, args.threads, 0))
except KeyboardInterrupt:
console.print("[red]Exit...[/red]")
exit(1)
elif args.urlfile:
try:
console.print("[blue]Use {} threads to scan url file {}[/blue]".format(args.threads, args.urlfile))
loop.run_until_complete(run2(args.urlfile, args.path, args.threads, 1)) if args.verbose is True else loop.run_until_complete(run2(args.urlfile, args.path, args.threads, 0))
except KeyboardInterrupt:
console.print("[red]Exit...[/red]")
exit(1)
loop.close()
console.print(table)
console.print("\nTask Completed used [green]{0}[/green] seconds".format(time.time() - start_time))
if __name__ == '__main__':
main()