mirror of
https://github.com/tldr-pages/tldr.git
synced 2025-07-29 17:35:49 +02:00
0faf88f3ca
* kiterunner-{brute, kb, scan, wordlist}, kite, kr: add page
* Update pages/common/kiterunner-brute.md
Co-authored-by: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
* Tweaks
* Update pages/common/kiterunner-brute.md
Co-authored-by: Managor <42655600+Managor@users.noreply.github.com>
* Twe4ks
---------
Co-authored-by: Managor <42655600+Managor@users.noreply.github.com>
Co-authored-by: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
37 lines
1.7 KiB
Markdown
37 lines
1.7 KiB
Markdown
# kiterunner scan
|
|
|
|
> A contextual web scanner for concurrently scanning API paths and web endpoints using kitebuilder wordlists.
|
|
> The `scan` subcommand targets one or multiple hosts with structured API requests.
|
|
> More information: <https://github.com/assetnote/kiterunner>.
|
|
|
|
- Scan a target with an Assetnote wordlist (e.g., first 5000 API routes):
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-A|--assetnote-wordlist]}} {{apiroutes-210228:5000}}`
|
|
|
|
- Scan a target with a kitebuilder wordlist:
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-w|--kitebuilder-list]}} {{path/to/wordlist.kite}}`
|
|
|
|
- Scan multiple hosts from a file with a kitebuilder wordlist:
|
|
|
|
`kiterunner scan {{path/to/hosts.txt}} {{[-w|--kitebuilder-list]}} {{path/to/wordlist.kite}}`
|
|
|
|
- Scan with an Assetnote wordlist and JSON output:
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-A|--assetnote-wordlist]}} {{apiroutes-210228:5000}} -o {{json}}`
|
|
|
|
- Scan with custom concurrency settings for performance:
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-w|--kitebuilder-list]}} {{path/to/wordlist.kite}} {{[-x|--max-connection-per-host]}} {{5}} {{[-j|--max-parallel-hosts]}} {{100}}`
|
|
|
|
- Scan with a wordlist as a normal wordlist, disabling depth scanning:
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-w|--kitebuilder-list]}} {{path/to/rafter.txt}} {{[-d|--preflight-depth]}} {{0}}`
|
|
|
|
- Scan with custom headers and ignore specific content length responses:
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-w|--kitebuilder-list]}} {{path/to/wordlist.kite}} {{[-H|--header]}} "{{Authorization: Bearer token}}" --ignore-length {{100-105}}`
|
|
|
|
- Perform a full kitebuilder scan without phase scanning:
|
|
|
|
`kiterunner scan {{https://example.com}} {{[-w|--kitebuilder-list]}} {{path/to/wordlist.kite}} --kitebuilder-full-scan`
|