v4.2.0
- Change the default template engine to support expressions in the template like
{{ threads * 2 }}
. - 🚨Breaking Change🚨 in the workflow, variables are now using the format
{{variable}}
instead of{{.variable}}
. - Workflow now supports dynamic threads, as shown below, allowing you to choose your tactic to slow down and speed up the scan based on your demands.
The threads
will be set default number of your CPUs which you can modify with the CLI flags --tactic aggressive
or --threads-hold=20
name: http-probing
desc: Running HTTP fingerprint technology and response with the supplied inputs
report:
final:
- "{{Output}}/fingerprint/{{Workspace}}-technologies.txt"
- "{{Output}}/fingerprint/beautify-{{Workspace}}-http.txt"
params:
- inputFile: "{{Target}}"
- httpFile: "{{Output}}/fingerprint/http-{{Workspace}}.txt"
- httpThreads: '{{ threads * 15 }}'
- screenThreads: '{{ threads }}'
- enableSreenshot: 'false'
- httpTimeout: '10'
pre_run:
- CreateFolder("{{Output}}/fingerprint")
steps:
- required:
- "{{inputFile}}"
commands:
- "echo {{inputFile}} | {{Binaries}}/httpx -nf -timeout {{httpTimeout}} -silent -t {{httpThreads}} >> {{httpFile}}"
- "cat {{inputFile}} | {{Binaries}}/httpx -nf -timeout {{httpTimeout}} -silent -t {{httpThreads}} >> {{httpFile}}"
scripts:
- SortU("{{httpFile}}")
- required:
- "{{Binaries}}/httpx"
- "{{httpFile}}"
commands:
- cat {{httpFile}} | {{Binaries}}/httpx -nf -timeout {{httpTimeout}} -t {{httpThreads}} -no-color -json -title -tech-detect -status-code -silent >> {{Output}}/fingerprint/{{Workspace}}-http-overview.txt
scripts:
- CleanJSONHttpx('{{Output}}/fingerprint/{{Workspace}}-http-overview.txt', '{{Output}}/fingerprint/{{Workspace}}-raw-overview.txt')
- ExecCmd("cat {{Output}}/fingerprint/{{Workspace}}-raw-overview.txt | csvtk pretty --no-header-row -I -s ' | ' -W 75 > {{Output}}/fingerprint/beautify-{{Workspace}}-http.txt")
- Cat('{{Output}}/fingerprint/beautify-{{Workspace}}-http.txt')