C编写的高速智能Web目录和文件枚举工具：Lulzbuster
Lulzbuster
Lulzbuster是用C编写的高速智能的Web目录和文件枚举工具。
下载与使用
| 1 | git clone https://github.com/noptrix/lulzbuster.git |
使用
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 | $ lulzbuster -H __ __ __ __ / /_ __/ /___ / /_ __ _______/ /____ _____ / / / / / /_ / / __ \/ / / / ___/ __/ _ \/ ___/ / / /_/ / / / /_/ /_/ / /_/ (__ ) /_/ __/ / /_/\__,_/_/ /___/_.___/\__,_/____/\__/\___/_/ --==[ by nullsecurity.net ] ==-- usage lulzbuster -s <arg> [opts] | <misc> target options -s <url> - start url to begin scan with http options -h <type> - http request type (default: GET) - ? to list types -x <code> - exclude http status codes (default: 400,404,500,501,502,503 multi codes separated by ',') -f - follow http redirects. hint: better try appending a '/' with '-A' option first instead of using '-f' -F <num> - num level to follow http redirects (default: 0) -u <str> - user-agent string (default: built-in windows firefox) -U - use random built-in user-agents -c <str> - pass custom header(s) (e.g. 'Cookie: foo=bar; lol=lulz') -a <creds> - http auth credentials (format: <user>:<pass>) -r - turn on auto update referrer -j <num> - define http version (default: curl's default) - ? to list timeout options -D <num> - num seconds for delay between requests (default: 0) -C <num> - num seconds for connect timeout (default: 10) -R <num> - num seconds for request timeout (default: 30) -T <num> - num seconds to give up and exit lulzbuster completely (default: none) tuning options -t <num> - num threads for concurrent scanning (default: 30) -g <num> - num connection cache size for curl (default: 30) note: this value should always equal to -t's value other options -w <file> - wordlist file (default: /usr/local/share/lulzbuster/lists/medium.txt) -A <str> - append any words separated by comma (e.g. '/,.php,~bak) -p <addr> - proxy address (format: <scheme>://<host>:<port>) - ? to list supported schemes -P <creds> - proxy auth credentials (format: <user>:<pass>) -i - insecure mode (skips ssl/tls cert verification) -S - smart mode aka eliminate false-positives, more infos, etc. (use this if speed is not your 1st priority!) -n <str> - nameservers (default: '1.1.1.1,8.8.8.8,208.67.222.222' multi separated by '.') -l <file> - log found paths and valid urls to file misc -X - print built-in user-agents -V - print version of lulzbuster and exit -H - print this help and exit |
