OWASP WEB Directory Scanner

Python	Linux	OSX
3.7
3.8
3.9
3.10
3.11

OpenDoor OWASP is console multifunctional website's scanner. This application finds all possible ways to login, index of/ directories, web shells, restricted access points, subdomains, hidden data and large backups. The scanning is performed by the built-in dictionary and external dictionaries as well. Anonymity and speed are provided by means of using proxy servers. Software is written for informational purposes and is open source product under the GPL license.

Read The Docs

• Current 4.1.0 (07.07.2023)
  • Directories: 83262
  • Subdomains: 255260

Changelog (last changes)

v4.1.0 (07.07.2023) Gain more power!

• Added --sniff skipsizes=25:60:101:...: allow skipping redirect to 200 OK pages which not found
• Fix --sniff skipempty: increase condition value to detect empty content <= 1000 bytes detect as empty page instead of 100 bytes
• Fix ResponseError: Unknown response status : 525: added to define incorrect SSL handshakes
• Fix Object of type HTTPHeaderDictItemView is not JSON serializable: if --debug set 3
• Fix response encode failed('Received response with content-encoding: gzip, but failed to decode it.', error('Error -3 while decompressing data: incorrect header check'))
• Added +20 new directories to internal wordlist
• Added +74242 new subdomains to internal wordlist
• Optimize internal wordlist directories.txt list (sort, removed trash lines)

Testing of the software on the live commercial systems and organizations is prohibited!

• ✅ directories scanner
• ✅ subdomains scanner
• ✅ multithreading control
• ✅ scan's reports
• ✅ HTTP(S) (PORT) support
• ✅ Keep-alive long pooling
• ✅ Invalid certificates scan
• ✅ HTTP(S)/SOCKS proxies
• ✅ dynamic request header
• ✅ custom wordlists prefixes
• ✅ custom wordlists, proxies, ignore lists
• ✅ debug levels (1-3)
• ✅ extensions filter
• ✅ custom reports directory
• ✅ custom config wizard (use random techniques)
• ✅ analyze techniques:
  • detect redirects
  • detect index of/ Apache
  • detect large files
  • skip 200 OK redirects
  • skip empty pages
  • heuristic detect invalid pages
  • blank success page filter
  • certificate required pages
• ✅ randomization techniques:
  • random user-agent per request
  • random proxy per request
  • wordlists shuffling
  • wordlists filters

Install PIP

curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py

Local installation and run

 git clone https://github.com/stanislav-web/OpenDoor.git
 cd OpenDoor/
 pip3 install -r requirements.txt
 chmod +x opendoor.py

 python3 opendoor.py --host http://www.example.com

Global installation (Preferably for OS distributions)

 git clone https://github.com/stanislav-web/OpenDoor.git
 cd OpenDoor/
 python3 setup.py build && python3 setup.py install

 opendoor --host http://www.example.com

Updates

 python3 opendoor.py --update
 opendoor --update

Help

usage: opendoor.py [-h] [--host HOST] [-p PORT] [-m METHOD] [-t THREADS]
                   [-d DELAY] [--timeout TIMEOUT] [-r RETRIES]
                   [--accept-cookies] [--debug DEBUG] [--tor]
                   [--torlist TORLIST] [--proxy PROXY] [-s SCAN] [-w WORDLIST]
                   [--reports REPORTS] [--reports-dir REPORTS_DIR]
                   [--random-agent] [--random-list] [--prefix PREFIX]
                   [-e EXTENSIONS] [-i IGNORE_EXTENSIONS] [--sniff SNIFF]
                   [--update] [--version] [--examples] [--docs]
                   [--wizard [WIZARD]]

optional arguments:
  -h, --help            show this help message and exit

required named options:
  --host HOST           Target host (ip); --host http://example.com

Application tools:
  --update              Update from CVS
  --version             Get current version
  --examples            Examples of usage
  --docs                Read documentation
  --wizard [WIZARD]     Run wizard scanner from your config

Debug tools:
  --debug DEBUG         Debug level -1 (silent), 1 - 3

Reports tools:
  --reports REPORTS     Scan reports (json,std,txt,html)
  --reports-dir REPORTS_DIR
                        Path to custom reports dir

Request tools:
  -p PORT, --port PORT  Custom port (Default 80)
  -m METHOD, --method METHOD
                        Request method (use HEAD as default)
  -d DELAY, --delay DELAY
                        Delay between requests threading
  --timeout TIMEOUT     Request timeout (30 sec default)
  -r RETRIES, --retries RETRIES
                        Max retries to reconnect (default 3)
  --accept-cookies      Accept and route cookies from responses
  --tor                 Using built-in proxylist
  --torlist TORLIST     Path to custom proxylist
  --proxy PROXY         Custom permanent proxy server
  --random-agent        Randomize user-agent per request

Sniff tools:
  --sniff SNIFF         Response sniff plugins
                        (indexof,collation,file,skipempty,skipsize=INT)
  
Stream tools:
  -t THREADS, --threads THREADS
                        Allowed threads

Wordlist tools:
  -s SCAN, --scan SCAN  Scan type scan=directories or scan=subdomains
  -w WORDLIST, --wordlist WORDLIST
                        Path to custom wordlist
  --random-list         Shuffle scan list
  --prefix PREFIX       Append path prefix to scan host
  -e EXTENSIONS, --extensions EXTENSIONS
                        Force use selected extensions for scan session -e
                        php,json e.g
  -i IGNORE_EXTENSIONS, --ignore-extensions IGNORE_EXTENSIONS
                        Ignore extensions for scan session -i aspx,jsp e.g

Maintainers

• @stanislav-web https://github.com/stanislav-web (Developer)

Tests

pip3 install  -r requirements-dev.txt
python setup.py test

Contributors

If you like to contribute to the development of the project, in that case, pull requests are open for you. Also, you can suggest an ideas and create a task in my track list

Documentation

• Read The Docs
• Opendoor OWASP CookBook
• Issues