Kang Asu
Bashter - Web Crawler, Scanner, And Analyzer Framework
Bashter is a tool for scanning a Web-based Application. Bashter is very suitable for doing Bug Bounty or Penentration Testing. It is designed like a framework so you can easily add a script for detect vulnerability.
${BASHTER_HOME}/parts/form/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}
${BASHTER_HOME}/parts/url/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}
${BASHTER_HOME}/parts/header/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}
For the sample, you can follow existing scripts.
Disable Script
You only need to change the extension, for example
by Default:
Disable Script
You only need to change the extension, for example
.bash
=> .xbash
.by Default:
- Detect Form Input
- Detect CORS Missconfiguration
- Detect X-FRAME-OPTIONS missing (Clickjacking Potential)
- Detect Reflected XSS via URL
- Detect Reflected XSS via Form
How to Install:
git clone https://github.com/zerobyte-id/Bashter.git
cd Bashter/
bash setup.bash
Contributor:
Regards
Kang Asu
No comments:
Post a Comment
# Silahkan berkomentar, bertanya dan kritik dengan sopan
# Disini anda boleh menyisipkan Link di kolom komentar
# Tetapi akan saya moderasi atau Review terlebih dahulu tiap komentar
# Jangan sampai komentar anda mengandung SPAM.
# Terima Kasih - Regards Muhammad Sobri Maulana