j5s / prad

Web directory and file discovery.

prad

Web directory and file discovery.

Usage

➜ prad  .\prad.exe -h
╱╱╱╱╱╱╱╱╱╱╭╮
╱╱╱╱╱╱╱╱╱╱┃┃
╭━━┳━┳━━┳━╯┃
┃╭╮┃╭┫╭╮┃╭╮┃
┃╰╯┃┃┃╭╮┃╰╯┃
┃╭━┻╯╰╯╰┻━━╯
┃┃
╰╯ v0.0.1

web directory and file discovery.

Usage:
  C:\prad.exe [flags]

Flags:
INPUT OPTIONS:
   -u, -url string         url to scan
   -wf, -word-file string  wordlist file

WORD OPTIONS:
   -we, -word-ext string     word extension
   -wp, -word-prefix string  word prefix
   -ws, -word-suffix string  word suffix

OUTPUT OPTIONS:
   -fc, -filter-code int   filter by status code
   -ec, -exclude-code int  exclude by status code

OTHER OPTIONS:
   -nc, -no-color      disable color in output
   -concurrent int     concurrent goroutines (default 10)
   -proxy string       proxy
   -timeout int        timeout (default 5)
   -qps int            QPS (default 10)
   -basic-auth string  basic auth user:pass
   -user-agent string  user agent
   -headers string[]   custom headers

➜ prad  .\prad.exe -u http://127.0.0.1:8000
╱╱╱╱╱╱╱╱╱╱╭╮
╱╱╱╱╱╱╱╱╱╱┃┃
╭━━┳━┳━━┳━╯┃
┃╭╮┃╭┫╭╮┃╭╮┃
┃╰╯┃┃┃╭╮┃╰╯┃
┃╭━┻╯╰╯╰┻━━╯
┃┃
╰╯ v0.0.1

404 - http://127.0.0.1:8000/.svn
404 - http://127.0.0.1:8000/admin
404 - http://127.0.0.1:8000/login
404 - http://127.0.0.1:8000/.git
404 - http://127.0.0.1:8000/backup
404 - http://127.0.0.1:8000/manager
200 - http://127.0.0.1:8000/.idea

➜ prad  .\prad.exe -u 'http://127.0.0.1:8000/{{path}}/admin'
╱╱╱╱╱╱╱╱╱╱╭╮
╱╱╱╱╱╱╱╱╱╱┃┃
╭━━┳━┳━━┳━╯┃
┃╭╮┃╭┫╭╮┃╭╮┃
┃╰╯┃┃┃╭╮┃╰╯┃
┃╭━┻╯╰╯╰┻━━╯
┃┃
╰╯ v0.0.1

404 - http://127.0.0.1:8000/backup/admin
404 - http://127.0.0.1:8000/login/admin
404 - http://127.0.0.1:8000/admin/admin
404 - http://127.0.0.1:8000/manager/admin
404 - http://127.0.0.1:8000/.svn/admin
404 - http://127.0.0.1:8000/.idea/admin
404 - http://127.0.0.1:8000/.git/admin

Features

• custom wordlist file
• custom word extension
• custom word prefix, word suffix
• custom URL replacement location
• support proxy
• concurrency settings
• filter by status code
• exclude by status code
• custom timeout
• QPS limit
• basic auth
• custom user agent
• custom headers
• progress save
• WAF detection