smith

smith copied to clipboard

                           /$$   /$$     /$$      
                          |__/  | $$    | $$      
    /$$$$$$$ /$$$$$$/$$$$  /$$ /$$$$$$  | $$$$$$$ 
   /$$_____/| $$_  $$_  $$| $$|_  $$_/  | $$__  $$
  |  $$$$$$ | $$ \ $$ \ $$| $$  | $$    | $$  \ $$
   \____  $$| $$ | $$ | $$| $$  | $$ /$$| $$  | $$
   /$$$$$$$/| $$ | $$ | $$| $$  |  $$$$/| $$  | $$
  |_______/ |__/ |__/ |__/|__/   \___/  |__/  |__/

    Simple meg wrapper to sieve through meg's
    output.

Initial set-up one-liner

This will clone this repository and then move all scripts to /usr/local/bin.

$ git clone [email protected]:EdOverflow/smith.git \
  && cp smith/smith /usr/local/bin/

Dependencies

• meg (https://github.com/tomnomnom/meg)

Usage

smith smith http://example.com

smith smith list.txt

The -s flag stands for 'scan'.

smith -s smith -s crlf http://example.com smith -s openredirects http://example.com smith -s subdomaintakeovers http://example.com smith -s files http://example.com

The -f flag stands for 'find'.

smith -f smith -f crlf

All types: - crlf - openredirects - subdomaintakeovers - files

Word lists

All word lists are located under the lists/ directory.

• crlf.txt
• crlf-special.txt
• openredirects.txt
• wordlist.txt

Contributing

I welcome contributions from the public. The issue tracker is the preferred channel for bug reports and feature requests. The bug tracker utilises several labels to help organise and identify issues. Whenever submitting a new issue, please use the GitHub issue search first — check if the issue has already been reported.

Make sure to run https://github.com/koalaman/shellcheck when you are done editing or create a shell script. This will help maintain clean and uniform code throughout the project.

If you would like to submit a patch via email, that is fine too. Just run the following command and send the patch to contact [at] edoverflow [dot] com:

$ git format-patch -<n> <SHA1>

Legal Disclaimer

This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by these scripts.

Donations

If you would like to support my work, you can use any of the addresses below:

Liberapay: https://liberapay.com/EdOverflow

Bitcoin: 1E2fZRNrrkCKPnWpKZAsJzByBoyoBURADN

Ethereum: 0xe98FC23fB4A8762d700c0354979dA5Db6c29Acc3

Buy me a coffee: https://www.buymeacoffee.com/edoverflow

License

MIT License — Copyright (c) 2018 EdOverflow