csp
Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs. I use this for reconnaissance purposes while bug bounty hunting.
Usage
$ cat hosts.txt
http://example.com/
$ cat hosts.txt | csp
example.com
subdomain.example.com
...
Set concurrency level using the -c flag.
$ csp -h
Usage of csp:
-c int
set the concurrency level (default 20)
$ cat hosts.txt | csp -c 2
...
Installation
$ go get -u github.com/edoverflow/csp
You can also download a binary and put it in your $PATH (e.g. in /usr/bin/).
Contributing
I welcome contributions from the public.
Using the issue tracker 💡
The issue tracker is the preferred channel for bug reports and features requests.
Issues and labels 🏷
The bug tracker utilizes several labels to help organize and identify issues.
Guidelines for bug reports 🐛
Use the GitHub issue search — check if the issue has already been reported.
Credit
Thank you to @TomNomNom, @jimen0, and @003random for their help.