-
Notifications
You must be signed in to change notification settings - Fork 46
/
Copy pathconst.go
58 lines (51 loc) · 1.52 KB
/
const.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
package main
import "regexp"
type (
FoundIssue struct {
Issue string `json:"issue"`
Path string `json:"path"`
Type string `json:"type"`
Secret string `json:"secret"`
}
DBData struct {
Issue string `json:"issue"`
Severity string `json:"severity"`
Detectors []string `json:"detectors"`
Validators struct {
Status []int `json:"status"`
Regex []string `json:"regex"`
} `json:"validators"`
Extractors []struct {
Regex string `json:"regex"`
Cgroups string `json:"cgroups"`
} `json:"extractors"`
}
)
var (
httpTimeout, baseFormLen int
maxWorkers, concurrentURLs, crawlDepth int
wildcardCrawl, submitForm, verifySSL bool
inpFile, userAgent, formString, outCsv string
dbData map[string]DBData
regexData map[string]string
crawlProgress = 0
reJSScript = regexp.MustCompile(`(?i)<script[^>]+src=['"]?([^'"\s>]+)`)
FORM_STRING = "httpl00t"
VERSION = "0.1"
DATAFILE = "lootdb.json"
OUTCSV = "httploot-results.csv"
REGEXFILE = "regexes.json"
USERAGENT = "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0"
BYTES = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
LACKOFART = `
_____
)=(
/ \ H T T P L O O T
( $ ) v%s
\___/
[+] HTTPLoot by RedHunt Labs - A Modern Attack Surface (ASM) Management Company
[+] Author: Pinaki Mondal (RHL Research Team)
[+] Continuously Track Your Attack Surface using https://redhuntlabs.com/nvadr.
`
// MAXCRAWLVAL int
)