search

maurosoria / dirsearch

Web path scanner
11.85k stars 2.3k forks source link

HTML title during enumeration #764

Open alfonsocaponi opened 3 years ago

alfonsocaponi commented 3 years ago

It would be very useful collect and report the HTML title during entrypoint enumeration. I don't know if easy to make... What do you think? :)

shelld3v commented 3 years ago

Hi, this is super easy to make, but the problem is it will make the output looks dirty

alfonsocaponi commented 3 years ago

True, but if it were optional... :) For example, putting title in square brackets. Just a note, remove "multi spaces" (keep only single spaces) and "carriage return":

200 - 17KB - https://example.com:443/docs/ [Apache Tomcat 8 (8.5.29) - Documentation Index]

In my opinion it would be an added value during bug bounty activities! :)

shelld3v commented 3 years ago

Browsing an URL is one of the most basic skills in bug bounty hunting! You can't do it? 😉

shelld3v commented 3 years ago

True, but if it were optional... :)

That fact that we can make tons of optional flags, but it will just flood the dirsearch flags. We only focus on important things, and remember that even you see the title, browsing that endpoint is still a must-do action

alfonsocaponi commented 3 years ago

Yes, I agree with you. It would just be a way to filter through large numbers :)

shelld3v commented 3 years ago

Yes, I agree with you. It would just be a way to filter through large numbers :)

Hello!

I am working on a PR, that allows you to create your own signatures. With a signature (YAML format), any response that matches the regex/text in the signature will be notified in the output. Is this a good replacement for your suggestion?