webcopilot icon indicating copy to clipboard operation
webcopilot copied to clipboard

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

Results 10 webcopilot issues
Sort by recently updated
recently updated
newest added

Hello Could you please add an option to run the tool against file of domains like roots.txt for finding subdomains when using -s option and add all the subdomains on...

enhancement
v2.0-beta

Can you add support for macOS?

The tool runs on assetfinder and then stucked on the sublist3r and does not skip it at all ?????

The tool runs on assetfinder and then stucked on the sublister and does not skip it at all

This is a simple Dockerfile to make the installation and testing easier. Tested only on x86

hello, lauching webcopilot with just a domain name seems to hang when using SUBLIST3R. I tried launching this tool directly (without copilot), and it asks for a VirusTotal API key....

correct spelling error

It's very complicated to read the results of the install script in a default ubuntu shell as you can see in the screen shot. Specially for the section Usage. ![image](https://github.com/h4r5h1t/webcopilot/assets/23694617/21c9ff97-01c6-418c-a922-6445ed71820d)

When running certspotter, webcopilot issues the following error: `[●] Subdomain Scanning - [certspotter]parse error: Invalid numeric literal at line 1, column 5` Looking a bit deeper, the API of certspotter...