CrawlBox

[Nytro]

CrawlBox

Easy way to brute-force web directory.

 

Operating Systems Tested

• MacOSX
• Kali Linux

Usage

python crawlbox.py [-h] [-v] [-w WORDLIST] url

positional arguments:

url            specific target url, like domain.com

optional arguments:

  -h, --help     show this help message and exit
  -v, --version  show program's version number and exit
  -w WORDLIST    specific path to wordlist file
  -d DELAY       add delay between requests

Example

web site scan with internal wordlist

python crawlbox.py www.domain.com

web site scan with external wordlist

python crawlbox.py www.domain.com -w wordlist.txt

Install

(as root)

  git clone https://github.com/abaykan/crawlbox.git
  cd crawlbox/
  pip install -r requirements.txt
  python crawlbox.py -h

note: tested with python 2.7.6

Media Review

• Seucurity Training Share : https://securityonline.info/crawlbox-brute-force-web-directory/
• PentestTools : https://pentesttoolz.com/2018/03/02/crawlbox-easy-way-to-brute-force-web-directory/

 

 

Sursa: https://github.com/abaykan/crawlbox