Source2URL
Table of Contents
Source2URL is a simple tool (currently bash only) designed to aid the content discovery phase of a web application security assessment. It parses a given directory containing source code and creates a URL list for all discovered resources.
Once this is complete it then makes an HTTP request to each URL, through a configured proxy, so that visibility of that resource is attained and spidering can then ensue/continue. A text file containing all the URLs is left behind for use with other tools as desired.
Code
The code is available from my GitHub page.
Syntax
You invoke the command like so:
./Source2URL /some/code/path/ basedir proxyhost:proxyport domain.tld
Next Steps
Here are some next steps:
- Improve the delimiter definition functionality so less manual editing of the script is needed.
- Write a C# GUI that does the same thing.
- Add the ability to exclude image files.
- Integrate with BurpSuite.
Any ideas, thoughts, or recommendations would be appreciated.
::
Comments
blog comments powered by Disqus