offensivedev / urldozer

Perform operations on URLs like extracting paths, parameter names and/or values, domain name, host name (without HTTP[s]).

urldozer

Perform operations on URLs like extracting path, parameter names and/or values, domain name, host name (without HTTP[s]). Useful in penetration testing engagements and bug bounty.

Installation

If you have Go installed and configured (i.e. with $GOPATH/bin in your $PATH):

go get -u github.com/offensivedev/urldozer

Otherwise download a release. To make it easier to execute you can put the binary in your $PATH.

Usage

$ urldozer -h
$ cat urls.txt | urldozer
$ echo "https://example.com/admin/?search=test&?file=index.php" | urldozer -param-value

Example use cases

• Create a parameter wordlist from URLs fetched gau/waybackurls
• Extract URL paths to check for vulnerabilities across different environment
• Find all domains used in list of URLs by piping the output like | sort -u

TODO

• Add payload to parameters
  • Option to inject payloads from file
• Output to file
  • Allow formats for output file (raw, json)

Author

Amit Kumar
Twitter - @offensivedev
LinkedIn - Amit Kumar