Thursday, 9 May 2019
0 comments

Bashter- Web Crawler, Scanner, and Analyzer Framework


Bashter- Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)



Bashter is a tool for scanning a Web-based Application. Bashter is very suitable for doing Bug Bounty or Penetration Testing. 


It is designed like a framework so you can easily add a script for detect vulnerability.

For Example

To be more powerful, You can add something script (custom) like this:
  • modules/form/yourscript.bash {WEB-URL} {SOURCECODE}
  • modules/url/yourscript.bash {WEB-URL} {SOURCECODE}
  • modules/header/yourscript.bash {WEB-URL} {SOURCECODE}


For the sample, you can follow existing scripts.

Disable Script

You only need to change the extension, for example .bash => .bashx.

by Default:

  • Web Crawler
  • Gather Input Form
  • Detect Missconfigured CORS
  • Detect missing X-FRAME-OPTIONS (Clickjacking Potential)
  • Detect Reflected XSS via URL
  • Detect Reflected XSS via Form
  • Detect HTTP Splitting Response via CRLF Injection
  • Detect Open Redirect

Tested on:

Linux, Ubuntu, Linux Debian

How to Run:

git clone https://github.com/zerobyte-id/Bashter.git

cd Bashter/

bash bashter.bash

Notes:

This tool will consume a lot of disk usage, so don't forget to housekeep bashter-tempdata and scan-logs.

Download

0 comments:

Post a Comment

Note: only a member of this blog may post a comment.

 
Toggle Footer
Top