项目说明
!alt tag
ABOUT:
BlackWidow is a python based web application spider to gather subdomains, URL's, dynamic parameters, email addresses and phone numbers from a target website. This project also includes Inject-X fuzzer to scan dynamic URL's for common OWASP .
DEMO VIDEO:
![BlackWidow Demo]()
FEATURES:
[x] Automatically collect all URL's from a target website[x] Automatically collect all dynamic URL's and parameters from a target website[x] Automatically collect all subdomains from a target website[x] Automatically collect all phone numbers from a target website[x] Automatically collect all email addresses from a target website[x] Automatically collect all form URL's from a target website[X] Automatically scan/fuzz for common OWASP TOP [x] Automatically saves all data into sorted text filesLINUX INSTALL:
USAGE:
SAMPLE REPORT:
!alt tag
DOCKER:
LICENSE:
You may modify and re-distribute this software as long as the project name "BlackWidow", credit to the author "xer0dayz" and website URL " are NOT mofified. Doing so will break the license agreement and a takedown notice will be issued.
DISCLAIMER:
This program is used for educational and ethical purposes only. I take no responsibility for any damages caused from using this program. By downloading and using this software, you agree that you take full responsibility for any damages and liability.
LINKS:
TwitterTwitterWebsite项目信息
开发语言:Python
Star 数:1824
技术要点
该项目属于安全软件方向的开源资源,代码结构清晰,适合安全研究人员学习参考。项目围绕A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.展开,提供了可运行的实现,对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看,此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论,梳理项目的初始化流程、核心模块职责与数据流转,逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包,解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证,避免影响生产系统。
免责声明
本资源来源于开源社区,仅供安全研究、技术学习与合法授权范围内的攻防演练使用,请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。