devanshbatham / ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
MIT License
2.53k stars 427 forks source link

Where is placeholder option ????? #94

Closed 7ealvivek closed 1 year ago

7ealvivek commented 1 year ago

hey, I use Paramspider extensively but I deleted it and somehow installed it back but I can't find the placeholder option Please get it back or if not possible please make the old version of Paramspider available in the release section.

devanshbatham commented 1 year ago

Added -p / --placeholder back:

⚓ root@pwnbox  paramspider -d example.tld -p '"><devansh>'

                                      _    __       
   ___  ___ ________ ___ _  ___ ___  (_)__/ /__ ____
  / _ \/ _ `/ __/ _ `/  ' \(_-</ _ \/ / _  / -_) __/
 / .__/\_,_/_/  \_,_/_/_/_/___/ .__/_/\_,_/\__/_/   
/_/                          /_/                    

                              with <3 by @0xasm0d3us           

[INFO] Fetching URLs for example.tld
[INFO] Found 35321 URLs for example.tld
[INFO] Cleaning URLs for example.tld
[INFO] Found 7218 URLs after cleaning
[INFO] Extracting URLs with parameters
[INFO] Saved cleaned URLs to results/example.tld.txt

⚓ root@pwnbox  cat results/example.tld.txt | grep "devansh" | head -n 5
https://example.tld/blog/better-language-models/?fileGuid=%22%3E%3Cdevansh%3E
https://example.tld/blog/emergent-tool-use/?source=%22%3E%3Cdevansh%3E
https://example.tld/blog/governance-of-superintelligence?s=%22%3E%3Cdevansh%3E
https://example.tld/research?topics=%22%3E%3Cdevansh%3E&greg=%22%3E%3Cdevansh%3E
https://example.tld/blog/gpt-2-6-month-follow-up/?source=%22%3E%3Cdevansh%3E

There is no need for --level anymore, as by default it fetches all params and replaces them with the placeholder.