FilesExpand file tree

master

/

dirbrute.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

182 lines (148 loc) · 4.86 KB

master

/

dirbrute.py

Copy path

Top

File metadata and controls

• Code
• Blame

182 lines (148 loc) · 4.86 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

#!/usr/bin/env python3

# -*- coding: utf-8 -*-

#

# dirbrute.py

#

# Copyright 2019 bingo <bingo@hacklab>

#

# This program is free software; you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation; either version 2 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

# GNU General Public License for more details.

#

#

yellow = "\033[93m"

green = "\033[92m"

blue = "\033[94m"

red = "\033[91m"

bold = "\033[1m"

end = "\033[0m"

print(blue+bold+"""

\t _ _ _ _

\t __| (_)_ __| |__ _ __ _ _| |_ ___

\t / _` | | '__| '_ \| '__| | | | __/ _ \\

\t| (_| | | | | |_) | | | |_| | || __/

\t \__,_|_|_| |_.__/|_| \__,_|\__\___|"""+bold+"V: 1.6"+ end +blue+"""

\t

\t Coded by: Bingo

\t ---------------

"""+end)

from concurrent.futures import ThreadPoolExecutor as executor

import sys, time, requests

from optparse import *

start = time.time()

def printer(word):

sys.stdout.write(word + " \r")

sys.stdout.flush()

return True

def presearch(domain, ext, url):

if ext == 'Null' or ext == 'None':

checkstatus(domain, url)

elif url == "" or url == " ":

pass

else:

ext = list(ext)

ext.append("")

for i in ext:

if i == "" or i == "None":

link = url

else:

link = url + "." + str(i)

checkstatus(domain, link)

def checkstatus(domain, url):

if url == "" or url == " ":

pass

elif url.startswith("#"):

pass

elif len(url) > 30:

pass

else:

printer("Testing: " + domain + url)

#time.sleep(1)

try:

link = domain + url

req = requests.head(link)

st = str(req.status_code)

if st.startswith("2"):

print(green + "[+] "+st+" | Found: " + end + "[ " + url + " ]" + " \r")

elif st.startswith("3"):

link = req.headers['Location']

#link = req.url

print(yellow + "[*] "+st+" | Redirection From: " + end + "[ " + url + " ]" + yellow + " -> " + end + "[ " + link + " ]" + " \r")

elif st.startswith("1"):

print(green + "[+] "+st+" | Found: " + end + "[ " + url + " ]" + " \r")

elif st.startswith("4"):

if st != '404':

print(blue+"[!] "+st+" | Found: " + end + "[ " + url + " ]" + " \r")

#writer(link,'up')

return True

except Exception:

#writer(url,'down')

return False

parser = OptionParser(green+"""

#Usage:"""+yellow+"""

-t target host

-w wordlist

-d thread number (Optional, Default: 10)

-e extensions (Optional, ex: html,php)

"""+green+"""

#Example:"""+yellow+"""

python3 dirbrute.py -t domain.com -w dirlist.txt -d 20 -e php,html

"""+end)

def Main():

try:

parser.add_option("-t", dest="target", type="string", help="the target domain")

parser.add_option("-w", dest="wordlist", type="string", help="wordlist file")

parser.add_option("-d", dest="thread", type="int", help="the thread number")

parser.add_option("-e", dest="extension", type="string", help="the extendions")

(options, args) = parser.parse_args()

if options.target == None or options.wordlist == None:

print(parser.usage)

exit(1)

else:

target = str(options.target)

wordlist = str(options.wordlist)

thread = str(options.thread)

ext = str(options.extension)

if thread == "None":

thread = 10

else:

thread = thread

if target.startswith("http"):

target = target

else:

target = "http://" + target

if target.endswith("/"):

target = target

else:

target = target + "/"

lines = len(open(wordlist).readlines())

print("["+ yellow + bold +"Info"+ end +"]:\n")

print(blue + "["+red+"+"+blue+"] Target: " + end + target)

print(blue +"["+red+"+"+blue+"] File: " + end + wordlist)

print(blue +"["+red+"+"+blue+"] Length: " + end + str(lines))

print(blue +"["+red+"+"+blue+"] Thread: " + end + str(thread))

print(blue +"["+red+"+"+blue+"] Extension: " + end + str(ext))

print("\n["+ yellow + bold +"Start Searching"+ end +"]:\n")

if ext == "None":

ext = "Null"

else:

ext = ext.split(",")

urls = open(wordlist, 'r')

with executor(max_workers=int(thread)) as exe:

jobs = [exe.submit(presearch, target, ext, url.strip('\n')) for url in urls]

took = time.time() - start

took = took / 60

took = round(took,2)

print(red + "Took: " + end + str(took) + " m" + " \r")

print("\n\t* Happy Hacking *")

except Exception as e:

print(red + "#Error: " + end + str(e))

exit(1)

if __name__ == '__main__':

Main()