Skip to content

Commit

Permalink
...
Browse files Browse the repository at this point in the history
  • Loading branch information
Riccardo Mollo committed Aug 6, 2024
1 parent 566d12d commit ad3ca7d
Show file tree
Hide file tree
Showing 2 changed files with 129 additions and 63 deletions.
181 changes: 123 additions & 58 deletions dirdigger.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -24,22 +24,26 @@
from fake_useragent import UserAgent
from termcolor import colored

requests.packages.urllib3.util.ssl_.DEFAULT_CIPHERS = 'ALL'
requests.packages.urllib3.util.ssl_.DEFAULT_CIPHERS = "ALL"
requests.packages.urllib3.contrib.pyopenssl.extract_from_urllib3()
urllib3.disable_warnings()


def logo():
print(colored(' ___ _ ___ _ ', 'cyan'))
print(colored(' / _ \(_)___/ _ \(_)__ ____ ____ ____', 'cyan'))
print(colored(' / // / / __/ // / / _ `/ _ `/ -_) __/', 'cyan'))
print(colored('/____/_/_/ /____/_/\_, /\_, /\__/_/ ', 'cyan'))
print(colored(' /___//___/ ', 'cyan'))
print(colored(' Coded by: Riccardo Mollo', 'cyan'))
print(colored(" ___ _ ___ _ ", "cyan"))
print(colored(" / _ \(_)___/ _ \(_)__ ____ ____ ____", "cyan"))
print(colored(" / // / / __/ // / / _ `/ _ `/ -_) __/", "cyan"))
print(colored("/____/_/_/ /____/_/\_, /\_, /\__/_/ ", "cyan"))
print(colored(" /___//___/ ", "cyan"))
print(colored(" Coded by: Riccardo Mollo", "cyan"))
print()


def test(url, ua, timeout):
try:
r = requests.head(url, headers = {'User-Agent': ua}, verify = False, timeout=(timeout, timeout))
r = requests.head(
url, headers={"User-Agent": ua}, verify=False, timeout=(timeout, timeout)
)
ret = r.status_code
except requests.ReadTimeout:
ret = 408
Expand All @@ -48,132 +52,193 @@ def test(url, ua, timeout):

return ret


def show(status, url, ignored_statuses):
if ignored_statuses is not None and str(status) in ignored_statuses:
pass
else:
str_status = str(status)

if status == 0:
status = colored('ERR', 'red', attrs=['reverse', 'bold'])
status = colored("ERR", "red", attrs=["reverse", "bold"])
elif status == 200:
status = colored(str_status, 'green')
status = colored(str_status, "green")
elif status == 301 or status == 302:
status = colored(str_status, 'yellow')
elif status == 400 or status == 401 or status == 403 or status == 404 or status == 405:
status = colored(str_status, 'red')
status = colored(str_status, "yellow")
elif (
status == 400
or status == 401
or status == 403
or status == 404
or status == 405
):
status = colored(str_status, "red")
elif status == 408:
status = colored(str_status, 'magenta')
elif status == 500 or status == 501 or status == 502 or status == 503 or status == 504 or status == 550:
status = colored(str_status, 'red')
status = colored(str_status, "magenta")
elif (
status == 500
or status == 501
or status == 502
or status == 503
or status == 504
or status == 550
):
status = colored(str_status, "red")
else:
status = str_status

print('[+] ' + status + ' - ' + url)
print("[+] " + status + " - " + url)


def line_count(file):
return int(subprocess.check_output('wc -l {}'.format(file), shell=True).split()[0])
return int(subprocess.check_output("wc -l {}".format(file), shell=True).split()[0])


def signal_handler(s, frame):
if s == 2: # SIGINT
print('You pressed Ctrl+C!')
print('Goodbye!')
if s == 2: # SIGINT
print("You pressed Ctrl+C!")
print("Goodbye!")
sys.exit()


def main():
parser = argparse.ArgumentParser()
parser.add_argument('-u', '--url', help = 'The base URL to start the scan from', required = True)
parser.add_argument('-w', '--wordlist', help = 'The file containing the wordlist', required = True)
parser.add_argument('-m', '--mode', help = 'Scan mode is "dir" or "file" (default: "dir")', required = False, default = 'dir')
parser.add_argument('-e', '--file-extensions', help = 'File extensions when mode is "file" (eg: php,aspx)', required = False)
parser.add_argument('-i', '--ignore-statuses', help = 'HTTP statuses to be ignored (eg: 404,302)', required = False, default = None)
parser.add_argument('-t', '--timeout', help = 'Request timeout in seconds (default: 5)', type = int, required = False, default = 5)
parser.add_argument(
"-u", "--url", help="The base URL to start the scan from", required=True
)
parser.add_argument(
"-w", "--wordlist", help="The file containing the wordlist", required=True
)
parser.add_argument(
"-m",
"--mode",
help='Scan mode is "dir" or "file" (default: "dir")',
required=False,
default="dir",
)
parser.add_argument(
"-e",
"--file-extensions",
help='File extensions when mode is "file" (eg: php,aspx)',
required=False,
)
parser.add_argument(
"-i",
"--ignore-statuses",
help="HTTP statuses to be ignored (eg: 404,302)",
required=False,
default=None,
)
parser.add_argument(
"-t",
"--timeout",
help="Request timeout in seconds (default: 5)",
type=int,
required=False,
default=5,
)
args = parser.parse_args()

base_url = args.url

if not validators.url(base_url):
print(colored('ERROR!', 'red', attrs = ['reverse', 'bold']) + ' Invalid URL: ' + colored(base_url, 'red'))
print(
colored("ERROR!", "red", attrs=["reverse", "bold"])
+ " Invalid URL: "
+ colored(base_url, "red")
)
print()
sys.exit(1)

wordlist_file = args.wordlist

if not os.path.isfile(wordlist_file):
print(colored('ERROR!', 'red', attrs = ['reverse', 'bold']) + ' Wordlist file not found or not readable: ' + colored(wordlist_file, 'red'))
print(
colored("ERROR!", "red", attrs=["reverse", "bold"])
+ " Wordlist file not found or not readable: "
+ colored(wordlist_file, "red")
)
print()
sys.exit(1)

mode = args.mode

if mode not in ('dir', 'file'):
print(colored('ERROR!', 'red', attrs = ['reverse', 'bold']) + ' Invalid mode: ' + colored(mode, 'red'))
if mode not in ("dir", "file"):
print(
colored("ERROR!", "red", attrs=["reverse", "bold"])
+ " Invalid mode: "
+ colored(mode, "red")
)
print()
sys.exit(1)

file_extensions = args.file_extensions
ignored_statuses = args.ignore_statuses
timeout = int(args.timeout)

if base_url[-1] != '/':
base_url += '/'
if base_url[-1] != "/":
base_url += "/"

start = time.time()
hostname = base_url.split("://")[1].split("/")[0]

try:
hostip = socket.gethostbyname(hostname)
except socket.gaierror:
hostip = ''
hostip = ""

try:
ua = UserAgent(cache = False, fallback = 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)').random
ua = UserAgent(
cache=False,
fallback="Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)",
).random
except fake_useragent.errors.FakeUserAgentError:
ua = 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)'
ua = "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"

logo()

print('[+] Base URL: ' + colored(base_url, 'white', attrs=['bold']))
print('[+] Hostname: ' + hostname)
print('[+] Host IP: ' + hostip)
print('[+] Wordlist: ' + wordlist_file)
print('[+] Words count: ' + str(line_count(wordlist_file)))
print('[+] Scan mode: ' + mode)
if file_extensions is not None and mode == 'file':
file_extensions = file_extensions.split(',')
print('[+] File extensions: ' + ', '.join(map(str, file_extensions)))
print('[+] Random user agent: ' + ua)
print("[+] Base URL: " + colored(base_url, "white", attrs=["bold"]))
print("[+] Hostname: " + hostname)
print("[+] Host IP: " + hostip)
print("[+] Wordlist: " + wordlist_file)
print("[+] Words count: " + str(line_count(wordlist_file)))
print("[+] Scan mode: " + mode)
if file_extensions is not None and mode == "file":
file_extensions = file_extensions.split(",")
print("[+] File extensions: " + ", ".join(map(str, file_extensions)))
print("[+] Random user agent: " + ua)
if ignored_statuses is not None:
ignored_statuses = ignored_statuses.split(',')
print('[+] Ignored HTTP codes: ' + ', '.join(map(str, ignored_statuses)))
print('[+] Timeout: ' + str(timeout) + ' seconds')
print('[+]')
ignored_statuses = ignored_statuses.split(",")
print("[+] Ignored HTTP codes: " + ", ".join(map(str, ignored_statuses)))
print("[+] Timeout: " + str(timeout) + " seconds")
print("[+]")

t = test(base_url, ua, timeout)
show(t, base_url, ignored_statuses)

if t != 0:
with open(wordlist_file, 'r') as wordlist:
with open(wordlist_file, "r") as wordlist:
for word in wordlist:
url = base_url + word.strip()

if mode == 'dir':
url += '/'
elif mode == 'file':
if mode == "dir":
url += "/"
elif mode == "file":
if file_extensions is not None and len(file_extensions) > 0:
for extension in file_extensions:
url2 = url + '.' + extension
url2 = url + "." + extension
t = test(url2, ua, timeout)
show(t, url2, ignored_statuses)
continue

t = test(url, ua, timeout)
show(t, url, ignored_statuses)

print('Elapsed time: ' + str(int(time.time() - start)) + ' seconds')
print('Goodbye!')
print("Elapsed time: " + str(int(time.time() - start)) + " seconds")
print("Goodbye!")
sys.exit()

if __name__ == '__main__':

if __name__ == "__main__":
signal.signal(signal.SIGINT, signal_handler)
main()
11 changes: 6 additions & 5 deletions requirements.txt
View file
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
fake_useragent==0.1.11
requests==2.27.1
termcolor==1.1.0
urllib3==1.26.9
validators==0.14.2
fake_useragent==1.4.0
fake_useragent==1.1.1
Requests==2.32.3
termcolor==2.4.0
urllib3==1.26.18
validators==0.20.0

0 comments on commit ad3ca7d

Please sign in to comment.