Scout is a URL fuzzer and spider for locating undisclosed VHOSTS, information and directories on an online server.
A full thesaurus is included within the binary, which means most portability and minimal configuration. Intention and fireplace!
Utilization
Utilization:
scout [command]Out there Instructions:
assist Assist about any command
url Uncover URLs on a given internet server.
model Show scout model.
vhost Uncover VHOSTs on a given internet server.
Flags:
-d, --debug Allow debug logging.
-h, --help assist for scout
-n, --no-colours Disable colored output.
-p, --parallelism int Parallel routines to make use of for sending requests. (default 10)
-k, --skip-ssl-verify Skip SSL certificates verification.
-w, --wordlist string Path to wordlist file. If this isn't specified an inner wordlist can be used.
Uncover URLs
Flags
-x, --extensions
File extensions to detect. (default php,htm,html,txt])
-f, --filename
Filename to hunt within the listing being searched. Helpful when all directories report 404 standing.
-H, --header
Additional header to ship with requests e.g. -H "Cookie: PHPSESSID=blah"
-c, --status-codes
HTTP standing codes which point out a optimistic discover. (default 200,400,403,500,405,204,401,301,302)
-m, --method
HTTP methodology to make use of.
-s, --spider
Scan web page content material for hyperlinks and make sure their existence.
Full instance
$ scout url http://192.168.1.1[+] Goal URL http://192.168.1.1
[+] Routines 10
[+] Extensions php,htm,html
[+] Optimistic Codes 200,302,301,400,403,500,405,204,401,301,302
[302] http://192.168.1.1/css
[302] http://192.168.1.1/js
[302] http://192.168.1.1/language
[302] http://192.168.1.1/model
[302] http://192.168.1.1/assist
[401] http://192.168.1.1/index.htm
[302] http://192.168.1.1/picture
[200] http://192.168.1.1/log.htm
[302] http://192.168.1.1/script
[401] http://192.168.1.1/prime.html
[200] http://192.168.1.1/shares
[200] http://192.168.1.1/shares.php
[200] http://192.168.1.1/shares.htm
[200] http://192.168.1.1/shares.html
[401] http://192.168.1.1/site visitors.htm
[401] http://192.168.1.1/reboot.htm
[302] http://192.168.1.1/debug
[401] http://192.168.1.1/debug.htm
[401] http://192.168.1.1/debug.html
[4 01] http://192.168.1.1/begin.htm
Scan full. 28 outcomes discovered.
Uncover VHOSTs
$ scout vhost https://google.com[+] Base Area google.com
[+] Routines 10
[+] IP -
[+] Port -
[+] Utilizing SSL true
account.google.com
accounts.google.com
weblog.google.com
code.google.com
dev.google.com
native.google.com
m.google.com
mail.google.com
cellular.google.com
www.google.com
admin.google.com
chat.google.com
Scan full. 12 outcomes discovered.
Set up
curl -s "https://uncooked.githubusercontent.com/liamg/scout/grasp/scripts/set up.sh" | bash
