Bashter

Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)

Bashter is a tool for scanning a Web-based Application. Bashter is very suitable for doing Bug Bounty or Penetration Testing. It is designed like a framework so you can easily add a script to detect vulnerability.

Feature

• Web Crawler
• Gather Input Form
• Detect Misconfigured CORS
• Detect missing X-FRAME-OPTIONS (Clickjacking Potential)
• Detect Reflected XSS via URL
• Detect Reflected XSS via Form
• Detect HTTP Splitting Response via CRLF Injection
• Detect Open Redirect

Install

git clone https://github.com/zerobyte-id/Bashter.git

Use

For Example

To be more powerful, You can add something script (custom) like this:

modules/form/yourscript.bash {WEB-URL} {SOURCECODE}

modules/url/yourscript.bash {WEB-URL} {SOURCECODE}

modules/header/yourscript.bash {WEB-URL} {SOURCECODE}

Copyright (c) 2019, ZeroByte.ID Warehouse

Source: https://github.com/zerobyte-id/