Giter Site home page Giter Site logo

devanshbatham / paramspider Goto Github PK

View Code? Open in Web Editor NEW
2.2K 37.0 387.0 378 KB

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

License: MIT License

Python 95.54% Dockerfile 4.46%
parameter-finder parameter bugbounty content-discovery osint fuzzing urls-parameters

paramspider's Issues

q:

Can not get target information
If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues
Traceback (most recent call last):
File "paramspider.py", line 73, in
main()
File "paramspider.py", line 37, in main
response = unquote(response)
File "D:\Python38\lib\urllib\parse.py", line 614, in unquote
if '%' not in string:
TypeError: argument of type 'bool' is not iterable

Encoding issue with non-unicode characters

In this case the letter 'ć' or '\u0107'.

Traceback (most recent call last): File "paramspider.py", line 67, in <module> main() File "paramspider.py", line 52, in main print('\n'.join(final_uris)) File "AppData\Local\Programs\Python\Python37\lib\encodings\cp1252.py", line 19, in encode return codecs.charmap_encode(input,self.errors,encoding_table)[0] UnicodeEncodeError: 'charmap' codec can't encode character '\u0107' in position 2259: character maps to <undefined>

not work

can not target get information error message !!

TypeError: argument of type 'bool' is not iterable

    
Can not get target information
If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues
Traceback (most recent call last):
  File "paramspider.py", line 73, in <module>
    main()
  File "paramspider.py", line 37, in main
    response = unquote(response)
  File "/usr/lib/python3.7/urllib/parse.py", line 609, in unquote
    if '%' not in string:
TypeError: argument of type 'bool' is not iterable

hi

Excuse me, this script not support the format of IP? such as 192.168.1.1:8080/admin/

Error with domain name

Hi,

Each time i try a domain name that contain a "-" i have this error:
Can not get target information

it doesn't work

python paramspider.py -d xxx.com
DOS print shbatham/ParamSpider//issues
image

version:python3.8

what happened? how can I do for it?
Longing for your valuable suggestions

not work

OOPS!! Timeout Error. Retrying in 2 seconds.

something wrong

can't use it ,always say Can not get target information. maybe i use wrong ...
D1BACD56-B14C-4F1E-8385-57642BF2F83F

1E4FBB55-97B1-4D50-BA5F-20C70F8ABEEE

It doesn't work, man

why do not you answer? It does not work!!!!!
error: OOPS!! Timeout Error. Retrying in 2 seconds.

cli tool

create setup.py and publish to pypi

error!! ##Traceback

Traceback (most recent call last):
File "paramspider.py", line 1, in
from core import requester
File "/home/user/Downloads/ParamSpider/core/requester.py", line 1, in
import requests
ModuleNotFoundError: No module named 'requests'
how to fix this bug can you please help me out

Cannot get target information

root@vivo1606:~/Downloads/ParamSpider-master# python3 paramspider.py --domain bugcrowd.com --exclude woff,css,js,png,svg,php,jpg

     ___                               _    __       
    / _ \___ ________ ___ _  ___ ___  (_)__/ /__ ____
   / ___/ _ `/ __/ _ `/  ' \(_-</ _ \/ / _  / -_) __/
  /_/   \_,_/_/  \_,_/_/_/_/___/ .__/_/\_,_/\__/_/   
                              /_/                    
                        
                        - coded with <3 by Devansh Batham 

Can not get target information
If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues
root@vivo1606:~/Downloads/ParamSpider-master#

SyntaxError: line 40

Hi, I have just noticed that you updated your script 5 days ago, so I tested out your script but somehow there's an error in line 40.
image

Tool not working on any of the domain

python3 paramspider.py --domain bugcrowd.com --exclude woff,css,js,png,svg,php,jpg --output bugcrowd.txt

Can not get target information If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues

For any of the domain it throws this error please help

Import Request Error

HI I`m using Python 3.7.4 v

when i tried to run this script I'm getting this below mentioned error

Traceback (most recent call last):
File "/root/XSS/ParamSpider/core/requester.py", line 1, in
import requests
ModuleNotFoundError: No module named 'requests'
python error

PIP

not work with subdomains

when i'm trying to do with subdomain max time it says
Can not get target information
If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues

[+] Total unique urls found : 0
[+] Output is saved here : output/b.txt

[!] Total execution time : 2.0016s

query used :-

python paramspider.py --domain engage.abc.com -o b.txt

gf+paramspider on window

i installed gf and paramspider on windows machine, can you explain how can use in windows env?
gf is in C:\Users\nath\go\src\github.com\tomnomnom\gf
ps is in D:\Dropbox\bug\Asus\Web\Tools\OSINT\ParamSpider

I get a bug

it's show "Can not get target information If you think this is a bug or unintentional behaviour."
and i change other domain it also bug。thanks

RAM memory saturation

Some domains, if they are large, saturate the RAM memory and linux kills the process

For exaxmple: python3 paramspider.py -d crd.auctions.yahoo.co.jp

OS: Linux Manjaro 5.4.62-1-MANJARO

Help

How can to use gf in windows im struggling following your steps i already install go located in C:\Users\juan\go\bin\gf. Im confused in this part Note : Replace '/User/levi/go/bin/gf' with the path where gf binary is located in your system.

tools is not running

image

The tools throws the following error
Can not get target information
If you think this is a bug or unintentional behaviour.

Steps to reproduce:

  1. clone the repo
  2. install all requirements using pip3
  3. then ran python3 paramspider.py -d www.tesla.com

my system specs are in attachment

image

error

Can not get target information
If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues
Traceback (most recent call last):
File "paramspider.py", line 73, in
main()
File "paramspider.py", line 37, in main
response = unquote(response)
File "/usr/lib/python3.7/urllib/parse.py", line 629, in unquote
if '%' not in string:
TypeError: argument of type 'bool' is not iterable

problem

gf redirect domain.txt
As you mentioned i follwed but its not working

no such pattern

Can not connect to server. Check your internet connection

I have installed the tool and found the following prompt while running it:

"Cannot connect to server. Check your internet connection"

Please find below the snapshot:

pip3 install -r requirements.txt
Collecting certifi==2020.4.5.1
Using cached certifi-2020.4.5.1-py2.py3-none-any.whl (157 kB)
Requirement already satisfied: chardet==3.0.4 in /usr/local/lib/python3.9/dist-packages (from -r requirements.txt (line 2)) (3.0.4)
Collecting idna==2.9
Using cached idna-2.9-py2.py3-none-any.whl (58 kB)
Collecting requests==2.23.0
Using cached requests-2.23.0-py2.py3-none-any.whl (58 kB)
Collecting urllib3==1.25.8
Using cached urllib3-1.25.8-py2.py3-none-any.whl (125 kB)
Installing collected packages: urllib3, idna, certifi, requests
Attempting uninstall: urllib3
Found existing installation: urllib3 1.24.3
Uninstalling urllib3-1.24.3:
Successfully uninstalled urllib3-1.24.3
Attempting uninstall: idna
Found existing installation: idna 2.8
Uninstalling idna-2.8:
Successfully uninstalled idna-2.8
Attempting uninstall: certifi
Found existing installation: certifi 2021.5.30
Uninstalling certifi-2021.5.30:
Successfully uninstalled certifi-2021.5.30
Attempting uninstall: requests
Found existing installation: requests 2.21.0
Uninstalling requests-2.21.0:
Successfully uninstalled requests-2.21.0
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
search-that-hash 0.2.8 requires click<8.0.0,>=7.1.2, but you have click 8.0.1 which is incompatible.
search-that-hash 0.2.8 requires requests<3.0.0,>=2.25.1, but you have requests 2.23.0 which is incompatible.
metafinder 1.1 requires beautifulsoup4>=4.9.3, but you have beautifulsoup4 4.6.3 which is incompatible.
metafinder 1.1 requires requests>=2.25.1, but you have requests 2.23.0 which is incompatible.
metafinder 1.1 requires urllib3>=1.26.4, but you have urllib3 1.25.8 which is incompatible.
emailfinder 0.2.3b0 requires beautifulsoup4>=4.9.3, but you have beautifulsoup4 4.6.3 which is incompatible.
emailfinder 0.2.3b0 requires requests>=2.25.1, but you have requests 2.23.0 which is incompatible.
emailfinder 0.2.3b0 requires urllib3>=1.26.4, but you have urllib3 1.25.8 which is incompatible.
censys 2.0.0 requires requests>=2.25.1, but you have requests 2.23.0 which is incompatible.
Successfully installed certifi-2020.4.5.1 idna-2.9 requests-2.23.0 urllib3-1.25.8
WARNING: Running pip as root will break packages and permissions. You should install packages reliably by using venv: https://pip.pypa.io/warnings/venv

┌──(root💀kali)-[~/ParamSpider]
└─# python3 paramspider.py --domain target.com --exclude woff,png,svg,php,jpg --output ~/target.com/DOMAINS/params_result.txt

     ___                               _    __                                                                                                                                                                                           
    / _ \___ ________ ___ _  ___ ___  (_)__/ /__ ____                                                                                                                                                                                    
   / ___/ _ `/ __/ _ `/  ' \(_-</ _ \/ / _  / -_) __/                                                                                                                                                                                    
  /_/   \_,_/_/  \_,_/_/_/_/___/ .__/_/\_,_/\__/_/                                                                                                                                                                                       
                              /_/                                                                                                                                                                                                        
                        
                        - coded with <3 by Devansh Batham 

Can not connect to server. Check your internet connection.

does not find parameters

I have problem becouse paramspider not fint paramaters:( why?

I have website:

└─# cat /var/www/html/index.php

<form action="index.php" method="get">
<input type="text" name="name" value="name">
<input type="submit" name="send" value="send">
</form>

<a href="index.php?name=michas">aaa</a>
Look this shit
<?php
echo $_GET['name'];
?>

i run paramspider:

┌──(root💀za)-[/opt/ParamSpider]
└─# python3 /opt/ParamSpider/paramspider.py --domain  http://mydomian/index.php


         ___                               _    __
        / _ \___ ________ ___ _  ___ ___  (_)__/ /__ ____
       / ___/ _ `/ __/ _ `/  ' \(_-</ _ \/ / _  / -_) __/
      /_/   \_,_/_/  \_,_/_/_/_/___/ .__/_/\_,_/\__/_/
                                  /_/

                            - coded with <3 by Devansh Batham

Can not get target information
If you think this is a bug or unintentional behaviour. Report here : https://github.com/devanshbatham/ParamSpider/issues




[+] Total unique urls found : 0
[+] Output is saved here   : output/http://maindomain/index.php.txt

[!] Total execution time      : 0.48279s

┌──(root💀za)-[/opt/ParamSpider]

CURL:

┌──(root💀za)-[/opt/ParamSpider]
└─# curl http://mydomain/index.php
<form action="index.php" method="get">
<input type="text" name="name" value="name">
<input type="submit" name="send" value="send">
</form>

<a href="index.php?name=michas">aaa</a>
Look this shit

┌──(root💀za)-[/opt/ParamSpider]
└─# **curl http://mydomainl/index.php?name=XSS**
<form action="index.php" method="get">
<input type="text" name="name" value="name">
<input type="submit" name="send" value="send">
</form>

<a href="index.php?name=michas">aaa</a>
Look this shit
**XSS**                                                                                                                                                   
┌──(root💀za

To run an error

Traceback (most recent call last):
File "paramspider.py", line 73, in
main()
File "paramspider.py", line 37, in main
response = unquote(response)
File "C:\python3\lib\urllib\parse.py", line 634, in unquote
if '%' not in string:
TypeError: argument of type 'bool' is not iterable

Tool runnning but showing no results

Everytime i run the tool its not working , using ubuntu wsl
there are no errors or warning in runtime but still its not giving any results. Count is always 0 for every domain i use it for .

[+] Total unique urls found : 0
[+] Output is saved here : output/google.com.txt

command : python3 paramspider.py --domain google.com

please resolve this issue.

Not able to featch info

when i am giving command like python3 paramspider.py --domain hackerone.com, always showing target info not showing.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.