maurosoria / dirsearch

Web path scanner
11.93k stars 2.31k forks source link

Auto-Extract Domain in Dictionary #1313

Open v1zr38g4m8op13azq3 opened 1 year ago

v1zr38g4m8op13azq3 commented 1 year ago

**I hope this message finds you well. First of all, I want to express my appreciation for dirsearch; it's a fantastic tool for web directory scanning.

I have been using dirsearch for some time now and have found it extremely useful in my security assessments. I would like to request a new feature that I believe would enhance the tool's flexibility even further.

The feature I'm proposing is to automatically extract the target's domain and main domain when %domain% is included in the dictionary. This would enable users to customize the scan for backup files more efficiently. For example, by adding %domain%.zip to the dictionary, the tool would be able to scan for files like test.test.com.zip and test.com.zip.

By implementing this functionality, dirsearch users would have a more streamlined way to scan for relevant backup files without the need to explicitly specify each subdomain variation.

I understand that you and your team have a lot on your plate, but if it's feasible, I believe this feature would greatly benefit the dirsearch community. I'm happy to provide any additional insights or collaborate in any way to help make this feature a reality.

Thank you for your time and consideration. I look forward to hearing from you.**

maurosoria commented 1 year ago

hello (please introduce your name) how you doing?

Thanks for asking! actually we always wanted to add new keywords to the wordlist processor. What you say is something like this:

%DOMAIN%.tar
%BASE_DOMAIN%.zip

And the resulting processing from running dirsearch -u example.com

example.com.tar
example.zip

This is the intended functionality ?

v1zr38g4m8op13azq3 commented 1 year ago

Thank you for your response, Mauro Soria!

Yes, exactly! That's precisely the intended functionality I was suggesting. Being able to use %DOMAIN% as placeholders in the wordlist processor would be extremely helpful for customizing the scan according to the target's domain and main domain.

Having this feature would make dirsearch even more versatile and efficient, allowing users to dynamically generate filenames specific to the target being scanned. It would save a lot of time and effort by automating the process of handling various subdomains and variations.

I truly appreciate your consideration in implementing this feature. If there's anything I can do to assist or provide further feedback, please feel free to let me know. I'm looking forward to seeing this enhancement in dirsearch!

Thank you again for your dedication to the project and for taking the time to discuss this suggestion.

Best regards, Kevin li

v1zr38g4m8op13azq3 commented 1 year ago

please let me add %domain%>>>%domain%.zip>>>https://www.example.com/www.example.com.zip and https://www.example.com/example.com.zip %currentdir%>>>%currentdir%.zip>>>https://example.com/scan/scan.zip (Take effect when scanning subdirectories %domainunderline%>>>%domainunderline%.zip>>>https://example.com/www_example_com.zip and https://example.com/example_com.zip This allows for flexible definition of extensions in the dictionary %domain%2023.bak %domain%2023.7z %domain%2023.zip %domain%2023.rar %domainunderline%2023.bak %domainunderline%2023.7z %domainunderline%2023.zip %domainunderline%2023.rar %currentdir%2023.bak %currentdir%2023.7z %currentdir%2023.zip %currentdir%2023.rar and so on

Believe me, this often has unintended effects

v1zr38g4m8op13azq3 commented 11 months ago

hello?