endpointscanner 7.3.2__tar.gz → 7.3.5__tar.gz

{endpointscanner-7.3.2 → endpointscanner-7.3.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: endpointscanner
-Version: 7.3.2
+Version: 7.3.5
 Summary: Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
 Project-URL: Homepage, https://github.com/SphericalFlower52811/endpointscanner
 Project-URL: Issues, https://github.com/SphericalFlower52811/endpointscanner/issues
@@ -17,7 +17,7 @@ Requires-Dist: httpx[http2]>=0.27.0
 Requires-Dist: colorama>=0.4.6
 Dynamic: license-file
 
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester For Websites (Version 7.3.2)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.4)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -70,7 +70,7 @@ Passable arguments:
 
 ## Installation
 
-You can install EndpointScanner via PyPI(global, recommended for Windows and Linux) or Homebrew(MacOS).
+You can install EndpointScanner via PyPI.
 
 ### Installation via PyPI (or pip)
 
@@ -157,25 +157,10 @@ Windows Command:
 py -m pip install --upgrade endpointscanner
 ```
 
-### Homebrew
-
-You may need to update first to be able to install EndpointScanner.
-
-```bash
-brew update
-```
-
-To install EndpointScanner via Homebrew (MacOS), run these two commands:
-
-```bash
-brew trust sphericalflower52811/tap
-brew install endpointscanner
-```
-
 After that, you will need to install chromium on playwright for the headless browser:
 
 ```bash
-python3 -m playwright install chromium
+playwright install chromium
 ```
 
 ## Example Commands
@@ -248,19 +233,20 @@ Version 7.3 added:
   - Turbopack
   - Parcel
 
-Version 7.3.1 added:
+Version 7.3.2 fixed a glitch showing robots.txt when it was not scanned.
 
-- EndpointScanner now installable on:
-  - Homebrew
+Version 7.3.3 was another minor patch and included a llms.txt for LLMs to digest.
 
-Version 7.3.2 fixed a glitch showing robots.txt when it was not scanned.
+Version 7.3.4 fixed header for the variable S_HEADER, as it contained an invalid User-Agent Header.
+
+Version 7.3.5 removed endpointscanner from Homebrew.
 
 ## Plans for next version and the future
 
 Version 7.4:
 
 - Detecting what type of captcha was used if the script is blocked.
-- Optimisation to make sorting of endpoints faster (called parallel requests or something)
+- Optimisation to make sorting of endpoints faster
 
 Future plans (May be added in the next version):
 none. please leave any suggestions you want.

{endpointscanner-7.3.2 → endpointscanner-7.3.5}/README.md

@@ -1,4 +1,4 @@
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester For Websites (Version 7.3.2)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.4)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -51,7 +51,7 @@ Passable arguments:
 
 ## Installation
 
-You can install EndpointScanner via PyPI(global, recommended for Windows and Linux) or Homebrew(MacOS).
+You can install EndpointScanner via PyPI.
 
 ### Installation via PyPI (or pip)
 
@@ -138,25 +138,10 @@ Windows Command:
 py -m pip install --upgrade endpointscanner
 ```
 
-### Homebrew
-
-You may need to update first to be able to install EndpointScanner.
-
-```bash
-brew update
-```
-
-To install EndpointScanner via Homebrew (MacOS), run these two commands:
-
-```bash
-brew trust sphericalflower52811/tap
-brew install endpointscanner
-```
-
 After that, you will need to install chromium on playwright for the headless browser:
 
 ```bash
-python3 -m playwright install chromium
+playwright install chromium
 ```
 
 ## Example Commands
@@ -229,19 +214,20 @@ Version 7.3 added:
   - Turbopack
   - Parcel
 
-Version 7.3.1 added:
+Version 7.3.2 fixed a glitch showing robots.txt when it was not scanned.
 
-- EndpointScanner now installable on:
-  - Homebrew
+Version 7.3.3 was another minor patch and included a llms.txt for LLMs to digest.
 
-Version 7.3.2 fixed a glitch showing robots.txt when it was not scanned.
+Version 7.3.4 fixed header for the variable S_HEADER, as it contained an invalid User-Agent Header.
+
+Version 7.3.5 removed endpointscanner from Homebrew.
 
 ## Plans for next version and the future
 
 Version 7.4:
 
 - Detecting what type of captcha was used if the script is blocked.
-- Optimisation to make sorting of endpoints faster (called parallel requests or something)
+- Optimisation to make sorting of endpoints faster
 
 Future plans (May be added in the next version):
 none. please leave any suggestions you want.

{endpointscanner-7.3.2 → endpointscanner-7.3.5}/endpointscanner.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: endpointscanner
-Version: 7.3.2
+Version: 7.3.5
 Summary: Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
 Project-URL: Homepage, https://github.com/SphericalFlower52811/endpointscanner
 Project-URL: Issues, https://github.com/SphericalFlower52811/endpointscanner/issues
@@ -17,7 +17,7 @@ Requires-Dist: httpx[http2]>=0.27.0
 Requires-Dist: colorama>=0.4.6
 Dynamic: license-file
 
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester For Websites (Version 7.3.2)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.4)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -70,7 +70,7 @@ Passable arguments:
 
 ## Installation
 
-You can install EndpointScanner via PyPI(global, recommended for Windows and Linux) or Homebrew(MacOS).
+You can install EndpointScanner via PyPI.
 
 ### Installation via PyPI (or pip)
 
@@ -157,25 +157,10 @@ Windows Command:
 py -m pip install --upgrade endpointscanner
 ```
 
-### Homebrew
-
-You may need to update first to be able to install EndpointScanner.
-
-```bash
-brew update
-```
-
-To install EndpointScanner via Homebrew (MacOS), run these two commands:
-
-```bash
-brew trust sphericalflower52811/tap
-brew install endpointscanner
-```
-
 After that, you will need to install chromium on playwright for the headless browser:
 
 ```bash
-python3 -m playwright install chromium
+playwright install chromium
 ```
 
 ## Example Commands
@@ -248,19 +233,20 @@ Version 7.3 added:
   - Turbopack
   - Parcel
 
-Version 7.3.1 added:
+Version 7.3.2 fixed a glitch showing robots.txt when it was not scanned.
 
-- EndpointScanner now installable on:
-  - Homebrew
+Version 7.3.3 was another minor patch and included a llms.txt for LLMs to digest.
 
-Version 7.3.2 fixed a glitch showing robots.txt when it was not scanned.
+Version 7.3.4 fixed header for the variable S_HEADER, as it contained an invalid User-Agent Header.
+
+Version 7.3.5 removed endpointscanner from Homebrew.
 
 ## Plans for next version and the future
 
 Version 7.4:
 
 - Detecting what type of captcha was used if the script is blocked.
-- Optimisation to make sorting of endpoints faster (called parallel requests or something)
+- Optimisation to make sorting of endpoints faster
 
 Future plans (May be added in the next version):
 none. please leave any suggestions you want.

{endpointscanner-7.3.2 → endpointscanner-7.3.5}/enumerateendpoint.py

@@ -40,7 +40,7 @@ PYODIDE_VFS_PRECISION_PATTERNS = [
 ]
 
 S_HEADER = {
-    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...",
+    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
     "Cache-Control": "no-store",    
     "Pragma": "no-cache",
     "If-None-Match": "",    
@@ -359,7 +359,8 @@ async def async_rate_test(url, num_reqs=100, method="GET", rb=None, rv=None, coo
             for idx, (h, body_data, json_flag) in enumerate(processed_queue):
                 asyncio.create_task(worker(h, body_data, json_flag, idx))
                 
-            print("[+] Streaming requests into the background network pipeline...")
+            print("Finishing up rate limiting test...")
+            #wait for all responses to load properly
             await asyncio.sleep(45.0)
 
         #label every single request using enumerate() to find out exactly when the first request timed out, or hit a non-200.
@@ -432,9 +433,11 @@ def checktime(st, at):
         else:
             if choice in ['n', 'no']:
                 print('Scan stopped. Any data found in the time window will be printed.')
+                print('Sensitive endpoints like ".git/config" will be automatically skipped.')
             else:
                 print('Choice not recognised, and will be defaulted to no.')
                 print('Scan stopped. Any data found in the time window will be printed.')
+                print('Sensitive endpoints like ".git/config" will be automatically skipped.')
             return "STOP"
     return "CONTINUE"
 def main():
@@ -469,7 +472,7 @@ def main():
         init(autoreset=True)
         print()
         print("-" * 40)
-        print(f"{Style.BRIGHT}Endpointscanner {Fore.LIGHTMAGENTA_EX}v7.3.2")
+        print(f"{Style.BRIGHT}Endpointscanner {Fore.LIGHTMAGENTA_EX}v7.3.5")
         print("-" * 40)
         print()
     if args.no_duplicate_prog and not args.show_prog:
@@ -1087,7 +1090,7 @@ def main():
                                         if nested_netloc == target_netloc:
                                             nested_safe = True
                                         elif get_apex(nested_netloc) == get_apex(target_netloc):
-                                            if any(token in nested_netloc for token in ["assets.", "cdn.", "vendor."]):
+                                            if any(token in nested_netloc for token in ["assets.", "cdn."]):
                                                 nested_safe = True
                                                 
                                         if nested_safe and check_nested_url not in js_files:
@@ -1240,18 +1243,19 @@ def main():
                 if len(found_paths) >= 12500:
                     exaggerate = "REALLY REALLY "
                     
-                print(f"\n[!] Number of endpoints found is {exaggerate}large.")
-                print(f"[*] Estimated sorting time: {esttime}")
+                print(f"\n[WARNING] Number of endpoints found is {exaggerate}large.")
+                print(f"Estimated sorting time: {esttime}")
                 
                 try:
                     userawoutput = input("Would you like to use the raw output instead? (No sorting at all) [y/n]\n >>> ")
                     if userawoutput.lower() in ['y', 'yes']:
+                        print("Endpoints will not be sorted.")
                         args.raw_output = True
                     else:
                         print("Endpoints will still be sorted.")
                         args.raw_output = False
                 except (KeyboardInterrupt, SystemExit):
-                    print("\n[!] Scan cancelled by user.")
+                    print("\nScan cancelled by user.")
                     return
 
                 

{endpointscanner-7.3.2 → endpointscanner-7.3.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "endpointscanner"
-version = "7.3.2"
+version = "7.3.5"
 readme = "README.md"
 description = "Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs."
 requires-python = ">=3.9"