A Fast & Simple web site scanner. Base on aiohttp and refer to the dirsearch of multi-threading version.

Can both run in Linux & Windows.

$ pip install wscan

• Fuzz web site path
• Mapping a site map
• Multi-co-routine
• User-agent randomization
• Custom extensions
• Custom maximum of co-routine
• Friendly interface

Type -h for help

$ wscan [-u URL] [-f] [-m] [Extend options]

• -u URL: Target URL.
• -f: Fuzz target url with dictionary .
• -m: Crawl all URL on the target to get a map.
• -b BASE: Base URL of fuzzing e.g -b /cms/app. [ Default: / ]
• -e EXTEND: Suffix name used for fuzzing. [Default: php]
• -max NUM: Max num of co-routine. [ Default: 20 ]
• -404 NOT_FOUND: Customize a 404 identification, it'll be used as a keyword for searching text. e.g. "Not found"
• -s: Crawl static resources when mapping target.
• --no-re: Don't redirect when requesting.
• -v,-vv: Show more detail.
• -h: Show this help message and exit.

Example

$ wscan -u "https://www.example.com/" -f -m

• Python >=3.5
• aiohttp
• colorama
• bs4