opendoor 3.3.36rc0

Implements

• [x] multithreading control

• [x] scan’s reports

• [x] directories scanner

• [x] subdomains scanner

• [x] HTTP(S) (PORT) support

• [x] Keep-alive long pooling

• [x] HTTP(S)/SOCKS proxies

• [x] dynamic request header

• [x] custom wordlst’s prefixes

• [x] custom wordlists, proxies, ignore lists

• [x] debug levels (1-3)

• [x] extensions filter

• [x] custom reports directory

• [x] custom config wizard (use random techniques)

• [x] analyze techniques

  • detect redirects

  • detect index of/ Apache

  • detect large files

  • certif required pages

• [x] randomization techniques

  • random user-agent per request

  • random proxy per request

  • wordlists shuffling

Local installation and run

git clone https://github.com/stanislav-web/OpenDoor.git
cd OpenDoor/
pip install -r requirements.txt
chmod +x opendoor.py

python3 opendoor.py --host http://www.example.com

Global installation (Preferably for OS distributions)

git clone https://github.com/stanislav-web/OpenDoor.git
cd OpenDoor/
python3 setup.py build && python3 setup.py install

opendoor --host http://www.example.com

Updates

python3 opendoor.py --update
opendoor --update

Changelog (last changes)

- Add config wizard (allows you to configure own project)

- Added custom reports directory --reports-dir /home/user/Reports
- Added user guide --docs
- Reusable proxy requests pooling in --tor, --torlist
- Prevent socks5 proxies warnings
- Optimizing scan execution
- Request's delays allow to use of milliseconds
- Python2.7 no longer support

Help

usage: opendoor.py [-h] [--host HOST] [-p PORT] [-m METHOD] [-t THREADS]
                   [-d DELAY] [--timeout TIMEOUT] [-r RETRIES]
                   [--accept-cookies] [--debug DEBUG] [--tor]
                   [--torlist TORLIST] [--proxy PROXY] [-s SCAN] [-w WORDLIST]
                   [--reports REPORTS] [--reports-dir REPORTS_DIR]
                   [--random-agent] [--random-list] [--prefix PREFIX]
                   [-e EXTENSIONS] [-i] [--update] [--version] [--examples]
                   [--docs] [--wizard [WIZARD]]

optional arguments:
  -h, --help            show this help message and exit

required named options:
  --host HOST           Target host (ip); --host http://example.com

Application tools:
  --update              Update from CVS
  --version             Get current version
  --examples            Examples of usage
  --docs                Read documentation
  --wizard [WIZARD]     Run wizard scanner from your config

Debug tools:
  --debug DEBUG         Debug level 1 - 3

Reports tools:
  --reports REPORTS     Scan reports (json,std,txt,html)
  --reports-dir REPORTS_DIR
                        Path to custom reports dir

Request tools:
  -p PORT, --port PORT  Custom port (Default 80)
  -m METHOD, --method METHOD
                        Request method (use HEAD as default)
  -d DELAY, --delay DELAY
                        Delay between requests threading
  --timeout TIMEOUT     Request timeout (30 sec default)
  -r RETRIES, --retries RETRIES
                        Max retries to reconnect (default 3)
  --accept-cookies      Accept and route cookies from responses
  --tor                 Using built-in proxylist
  --torlist TORLIST     Path to custom proxylist
  --proxy PROXY         Custom permanent proxy server
  --random-agent        Randomize user-agent per request

Sniff tools:
  -i, --indexof         Detect Apache Index of/

Stream tools:
  -t THREADS, --threads THREADS
                        Allowed threads

Wordlist tools:
  -s SCAN, --scan SCAN  Scan type scan=directories or scan=subdomains
  -w WORDLIST, --wordlist WORDLIST
                        Path to custom wordlist
  --random-list         Shuffle scan list
  --prefix PREFIX       Append path prefix to scan host
  -e EXTENSIONS, --extensions EXTENSIONS
                        Extensions filter -e php,json e.g

Maintainers

• @stanislav-web https://github.com/stanislav-web (Developer)

Tests

pip install  -r requirements-dev.txt
coverage run --source=src/ setup.py test

Contributors

If you like to contribute to the development of the project in that case pull requests are open for you. Also, you can suggest an ideas and create a task in my track list

Documentation

• Opendoor OWASP CookBook

• Issues