Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implemented wildcard dir detection using the uuid approach #29

Merged
merged 1 commit into from
Mar 1, 2017

Conversation

gehaxelt
Copy link
Contributor

@gehaxelt gehaxelt commented Oct 2, 2016

Sample run:

$> ./gobuster -m dir -w directory-list-1.0.txt -t 1 -u 'https://wildcard.domain.tld/' -v 

Gobuster v1.2                OJ Reeves (@TheColonial)
=====================================================
[+] Mode         : dir
[+] Url/Domain   : https://wildcard.domain.tld/
[+] Threads      : 1
[+] Wordlist     : directory-list-1.0.txt
[+] Status codes : 302,307,200,204,301
[+] Verbose      : true
=====================================================
[-] Wildcard response found: https://wildcard.domain.tld/27ba698a-9ceb-4600-b074-f2ce87a4865e => 200
[-] To force processing of Wildcard responses, specify the '-fw' switch.
=====================================================

and

$>  ./gobuster -m dir -w directory-list-1.0.txt -t 1 -u 'https://wildcard.domain.tld/' -v -fw

Gobuster v1.2                OJ Reeves (@TheColonial)
=====================================================
[+] Mode         : dir
[+] Url/Domain   : https://wildcard.domain.tld/
[+] Threads      : 1
[+] Wordlist     : directory-list-1.0.txt
[+] Status codes : 302,307,200,204,301
[+] Verbose      : true
=====================================================
[-] Wildcard response found: https://wildcard.domain.tld/1fe80eb4-d537-494e-8112-65c5a6809969 => 200
^C[!] Keyboard interrupt detected, terminating.
Found : /cgi-bin (Status: 200)
Found : /education (Status: 200)
Found : /betsie (Status: 200)
=====================================================

You might want to adjust the info messages.

Closes #26

@gehaxelt
Copy link
Contributor Author

gehaxelt commented Oct 2, 2016

PS: You can close #27 if you decide to merge this.

@OJ
Copy link
Owner

OJ commented Oct 2, 2016

Awesome, thanks very much for this! I will indeed close #27 in favour of this one. Thanks!

@OJ
Copy link
Owner

OJ commented Feb 22, 2017

Hey @gehaxelt apologies for being slow with this. I aim to get this going soon!

@gehaxelt
Copy link
Contributor Author

Hey @OJ
no worries! I'll continue to use my fork in the meantime :)

OJ added a commit that referenced this pull request Mar 1, 2017
@OJ
Copy link
Owner

OJ commented Mar 1, 2017

Landing shortly! It's made its way into the 1.3 branch.

@OJ OJ merged commit e92eb98 into OJ:master Mar 1, 2017
@codingo
Copy link

codingo commented May 30, 2018

I know this has been a feature for a while, but wanted to say thank-you to @gehaxelt. This is an invaluable feature for a number of bounty programs and I really appreciate your work!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants