View Issue Details

IDProjectCategoryView StatusLast Update
0008542Kali LinuxNew Tool Requestspublic2023-12-01 16:37
Reportersockykali Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionopen 
Summary0008542: DirGrep
Description

DirGrep is a Bash script designed to simplify and combine the process of directory fuzzing and keyword searching within a specified domain. It leverages Gobuster for directory fuzzing and curl for sending HTTP requests.

Can be useful in CTFs searching for keywords on a domain, or searching for statements that could represent a vulnerability on the domain you're scanning

Features
Directory fuzzing using Gobuster
Keyword searching in the content of the discovered directories
Customizable User-Agent and cookies for HTTP requests
Retry mechanism for failed HTTP requests
Logging of operations to a file
Requirements
Gobuster
curl
Usage
./dirgrep.sh [-u user_agent] [-d domain] [-c cookie] [-h | -help]

Options
-u user_agent: Specify a custom User-Agent for curl requests (optional).

-d domain: Specify the domain to fuzz.

-c cookie: Specify a custom cookie to be used with curl requests (optional) (e.g -c NAME:VALUE).

-h, -help: Show the help message.

Interactive Commands
While the tool is in use, the following commands are available:

EXIT: Exit the tool.

RESCAN: Rescan the domain using the same wordlist.

Notes
Press Ctrl+C to interrupt domain scanning and search with currently found directories.

Leave the URL field blank to proceed with the last scanned domain.

Script will dump a lot of messy log files to /tmp. To protect from information disclosure, chmod 600 is ran on these files. If you want these log files for some reason, you can modify Constants on the script with your desired directory.

Saving results to a text file will always write to the working directory

Contact
Feedback, improvements, issues, suggestions, banter, please reach me here - [email protected]

License
This project is licensed under the terms of the MIT license.

Version 1.0

Homepage: https://github.com/sockykali/DirGrep/

Download: curl -sL https://raw.githubusercontent.com/sockykali/DirGrep/main/DirGrep.sh | tr -d '\r' > DirGrep.sh

Author: sockykali

Licence: MIT

Similar tools: I'm not aware of any that integrate enumeration and keyword searching, but this tool relies on dirbuster, grep and curl in conjunction with eachother

Activity: Began 3 months ago. Still working on V1.1 and awaiting feedback from users. Will be updated as time goes on to add new features but no major errors or issues occur with the tool. Everything functions as it should

I got temporarily blocked probably because I uploaded this script, and also seems to be blocking me from including the quickstart command here, so please view the script on the it's repo - https://github.com/sockykali/DirGrep

Super open to any feedback, suggestions, improvements, anything you might have. Thanks for taking a look!

Activities

sockykali

sockykali

2023-11-30 22:47

reporter   ~0018651

dependencies: gobuster, curl

g0tmi1k

g0tmi1k

2023-12-01 16:37

administrator   ~0018652

Thanks for the suggesiton, but this feels too much of a wrapper without extending enough functionality

Issue History

Date Modified Username Field Change
2023-11-30 22:31 sockykali New Issue
2023-11-30 22:47 sockykali Note Added: 0018651
2023-12-01 16:37 g0tmi1k Note Added: 0018652
2023-12-01 16:37 g0tmi1k Status new => closed