Before diving into the details of this feature request, just wanted to say this tool is pretty freaking sweet and extremely useful.
This feature request would make the tool even sweeter in my eyes! In some cases, whether it be things like CloudFlare, how the webserver is configured, WAFs, etc... just because kiterunner discovers an endpoint with a 200 status code response does not automatically make it a valid endpoint. Especially in the case of API content discovery, it would be great with the addition of an -irr flag where it works the same as nuclei, where for every request, kiterunner prints the request and response, this would be great so it makes further analyzing of kiterunner's output smoother and more ingestable into parsers that may use regex or grep to easily filter on certain keywords that could be of interest.
NotoriousRebel
commented
3 years ago
Before diving into the details of this feature request, just wanted to say this tool is pretty freaking sweet and extremely useful.
This feature request would make the tool even sweeter in my eyes! In some cases, whether it be things like CloudFlare, how the webserver is configured, WAFs, etc... just because kiterunner discovers an endpoint with a 200 status code response does not automatically make it a valid endpoint. Especially in the case of API content discovery, it would be great with the addition of an
-irrflag where it works the same as nuclei, where for every request, kiterunner prints the request and response, this would be great so it makes further analyzing of kiterunner's output smoother and more ingestable into parsers that may use regex or grep to easily filter on certain keywords that could be of interest.