perl-buster

Basic directory brute-force tool in perl

USAGE:
    perl perl-buster.pl [args]

EXAMPLE: 
    perl perl-buster.pl -u [BASE_URL] -w [WORDLIST]
    perl perl-buster.pl -u [BASE_URL] -w [WORDLIST] -t [TIME_BETWEEN_REQUESTS]
    perl perl-buster.pl -u [BASE_URL] -w [WORDLIST] -o [OUTPUT_FILE_PATH]
    perl perl-buster.pl -u [BASE_URL] -w [WORDLIST] -q

FLAGS: 
    -h,     help me find what this program does
    -u,     base URL
    -w,     path to the wordlist file
    -t,     time between requests, make process quieter
    -o,     relative path to output file
    -q,     quiet mode, no responses printed to console

Example output

perl perl-buster.pl -u google.com -w ./common.txt -o google-dir.txt -t 0
#################################
#                               #
#         perl-buster           #
#                               #
#################################
200 -> http://google.com/
200 -> http://google.com/robots.txt
200 -> http://google.com/save
200 -> http://google.com/saved
200 -> http://google.com/saves
200 -> http://google.com/script
200 -> http://google.com/search
#################################
Time to execute: 9(s)
#################################

Wordlist sources

This is by far the best resource for word lists I have found so far. https://github.com/gmelodie/awesome-wordlists.

TODO

[x] - Port support with default being 80
[x] - Specify https if needed
[x] - Ability to add accepted http response codes
[ ] - Cookies
[ ] - Threading
[x] - Use HEAD instead of GET requests - dcx86r
[ ] - "I would also suggest looking at Mojo::UserAgent, async/promises are nice to have when you start wanting to manage concurrent requests and waiting for responses." - dcx86r (reddit)
[ ] - "configure timeouts. I think the default is something like 120 seconds, which is probably too long." - BitterMartian (reddit)
[ ] - "configure an optional pause between two failed checks. Some security filters will see three or bad requests (400, 403, 404) within 15 minutes of each other and block the IP from connecting." - BitterMartian (reddit)
[x] - "configure the user agent so that it's something other than the default (but please don't use one from a real web browser, though I imagine you might want an option to change it for proper pen testing)." - BitterMartian (reddit)
[x] - Make GET / HEAD options "I disagree. Sometimes a server will respond to GET requests but not HEAD requests. (I've run into these in the wild.) So you might want to make that an option." - BitterMartian (reddit)
[ ] - "Great work! Another suggestion - unless you need the full monte of LWP functionality, consider using HTTP::Tiny instead - it's significantly faster (and is also a core module!)" - allegedrc4 (reddit)
[ ] - Implement unit testing
[ ] - Automated testing
[ ] - Move options up
[ ] - Update Examples for each new feature / argument