zenbuster - 多线程URL枚举/内容发现

项目说明

About

<p align="center">
<a href="
<img alt="0xTas Twitter" src="
<a href="
<img alt="0xTas Youtube" src="
<a href="
<img alt="GitHub Commits" src="
<a href="
<img alt="GitHub Download" src="
</p>

*ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin* (@0xTas).

I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity tooling in general.
ZenBuster may not be the fastest or most comprehensive tool of its kind. It is however, simple to use, decently flexible, and in practice only marginally slower than other "tried-and-true" tools like Gobuster.
Personally, I have been using it to help me solve CTF challenges on platforms like TryHackMe, and ha my implementation to be satisfactorily reliable.

This software is intended for use in CTF challenges, or by security professionals to gather information on their targets:

*It is capable of brute-force enumerating subdomains and also URI resources (directories/files).*

*Both methods of enumeration require use of an appropriate wordlist or dictionary file.*

Features Include:

1. Hostname format supports standard, IPv4, and IPv6.
2. Support for logging results to a file with *-o [filename]*.
3. Specifying custom ports for nonstandard webservers with *-p <port>*.
4. Optional file extensions in directory mode with *-x <extensions>*.
5. Quiet mode for less distracting output with *-q*.
6. Color can be disabled for less distracting output with *-nc* / *-nl*.
7. Add to the list of http status codes to ignore (default 5xx, 404) with *-ic*.
8. Ignore specific response content-lengths with *-fl*.
9. Tested on Python 3.10 and 3.11, with theoretical support for >= 3.6

CAUTION/DISCLAIMER

*ZenBuster is capable of producing a potentially unwelcome number of HTTP requests in a short amount of time.*

The de and contributors are not liable or responsible for any damage caused by misuse or abuse of this software.

*Please Enumerate Responsibly!*

License

<p align="center">
<a href="
<img alt="GNU GPL-3.0" src="
</p>

ZenBuster is licensed under the GNU GPLv3 License, see here for more information.

Credits

Yin-Yang ASCII art in the banners were created by Joan G. Stark (*jgs*) and Hayley Jane Wakenshaw (*hjw*).
Modifications were made by me, when specified with: '*zg*'.

---

Showcase

Help Page:<br>
!ZenBuster

Directory Enumeration Mode:<br>
!ZenBuster

Subdomain Enumeration Mode:<br>
!ZenBuster

---

Installation

Firstly, ensure that Python >= 3.6 is installed, then clone the repository with:

git clone

Next, cd zenbuster and, if on Linux: chmod +x zenbuster.py.

Dependencies

ZenBuster relies on 3 external libraries to function, and it is recommended to install these with:

pip install -r requirements.txt

The modules that will be installed and their purposes are as follows:

1. Python requests
- The backbone of each enumeration request. Without this, the script will not function.

2. termcolor
- Enables colored terminal output. Non-critical, the script can still run without color if this is not present.

3. colorama (Windows only)
- Primes the Windows terminal to accept ANSI color codes (from Termcolor). Non-critical.

These dependencies may be installed manually, with pip using requirements.txt, or with the script upon first run.

---

Usage

Once dependencies have been installed, you can run the program in the following ways:

On Linux (+Mac?):

./zenbuster.py [options] or python3 zenbuster.py [options]

On Windows:

python zenbuster.py [options]

[Options]

Short Flag |Long Flag |Purpose
--------------|-------------|-------------
-h |--help |Displays the help screen and exits
-d |--dirs |Enables Directory Enumeration Mode
-s |-ssl |Forces usage of HTTPS in requests
-v |-- |Prints info to terminal/log
-q |--quiet |Minimal terminal output until final results
-nc |--no-color |Disables colored terminal output
-nl |--no-lolcat |Disables lolcat-printed banner (Linux only)
-ic \<codes\> |--ignore-codes |List of status codes to exclude from results.
-fl \<lengths\> |--filter-lengths |List of Response Lengths to Ignore.
-u \<hostname\> |--host |Host to target for the scan
-w \<wordlist\> |--wordlist |Path to wordlist/dictionary file
-x \<exts\> |--ext |Comma-separated list of file extensions (Dirs only)
-p <port#> |--port |Custom port option for nonstandard webservers
-o [filename] |--out-file |Log results to a file (accepts custom name/path)

Example Usage

./zenbuster.py -d -w /usr/share/wordlists/dirb/common.txt -u target.thm -v

python3 zenbuster.py -w ../subdomains.txt --host target.thm --ssl -O myResults.log

zenbuster -w subdomains.txt -u target.thm --quiet -ic 400, 403 (With .bashrc alias)

---

Updating

Updating ZenBuster is easy! Just move into the installation folder (cd zenbuster) and git pull. That's it!

---

Planned Features/Impro

Increased levels of optional .

Allow optional throttling of task thread-count.

~~Allow users to modify the list of ignored status codes.~~ DONE.

Allow greater user control o request headers.

~~Allow optional ignoring of responses based on content-length.~~ DONE.

Expand subdomain enumeration to include OSINT methods instead of just brute-forcing.

Explore a more comprehensive and source-readable solution to fancy colored output (possibly using rich).

---

Known Issues/Limitations

Enumerating long endpoints may result in ugly terminal output due to line-wraping on smaller console windows. *Logging to a file is recommended, especially on Windows.*

If target host is a vHost on a shared webserver, enumeration via IP may not function as expected. *Use domain/hostname instead.*

Ignoring redirect status codes (3xx) with *-ic* doesn't work if the status code at the end of the redirect's path isn't also ignored.

---

<p align="center">
<a href="
<img alt="ZenBuster " src="
</p>

ZenBuster is currently at 1.3

项目信息

开发语言：Python

Star 数：108

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Multi-threaded URL enumeration/content-discovery tool in Python.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。