endpointscanner 7.3.6__tar.gz → 7.3.8__tar.gz

{endpointscanner-7.3.6 → endpointscanner-7.3.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: endpointscanner
-Version: 7.3.6
+Version: 7.3.8
 Summary: Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
 Project-URL: Homepage, https://github.com/SphericalFlower52811/endpointscanner
 Project-URL: Issues, https://github.com/SphericalFlower52811/endpointscanner/issues
@@ -17,7 +17,7 @@ Requires-Dist: httpx[http2]>=0.27.0
 Requires-Dist: colorama>=0.4.6
 Dynamic: license-file
 
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.6)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.8)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -243,6 +243,10 @@ Version 7.3.5 removed endpointscanner from Homebrew.
 
 Version 7.3.6 updated the script to exit if playwright browser does not exist.
 
+Version 7.3.7 was a patch that added vendor.example.com to subdomains to scan as it contains code for the website.
+
+version 7.3.8 gave more time for rate limiting test requests to settle.
+
 ## Plans for next version and the future
 
 Version 7.4:

{endpointscanner-7.3.6 → endpointscanner-7.3.8}/README.md

@@ -1,4 +1,4 @@
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.6)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.8)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -224,6 +224,10 @@ Version 7.3.5 removed endpointscanner from Homebrew.
 
 Version 7.3.6 updated the script to exit if playwright browser does not exist.
 
+Version 7.3.7 was a patch that added vendor.example.com to subdomains to scan as it contains code for the website.
+
+version 7.3.8 gave more time for rate limiting test requests to settle.
+
 ## Plans for next version and the future
 
 Version 7.4:

{endpointscanner-7.3.6 → endpointscanner-7.3.8}/endpointscanner.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: endpointscanner
-Version: 7.3.6
+Version: 7.3.8
 Summary: Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
 Project-URL: Homepage, https://github.com/SphericalFlower52811/endpointscanner
 Project-URL: Issues, https://github.com/SphericalFlower52811/endpointscanner/issues
@@ -17,7 +17,7 @@ Requires-Dist: httpx[http2]>=0.27.0
 Requires-Dist: colorama>=0.4.6
 Dynamic: license-file
 
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.6)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.8)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -243,6 +243,10 @@ Version 7.3.5 removed endpointscanner from Homebrew.
 
 Version 7.3.6 updated the script to exit if playwright browser does not exist.
 
+Version 7.3.7 was a patch that added vendor.example.com to subdomains to scan as it contains code for the website.
+
+version 7.3.8 gave more time for rate limiting test requests to settle.
+
 ## Plans for next version and the future
 
 Version 7.4:

{endpointscanner-7.3.6 → endpointscanner-7.3.8}/enumerateendpoint.py

@@ -257,8 +257,8 @@ async def async_rate_test(url, num_reqs=100, method="GET", rb=None, rv=None, coo
         if not rh:
             current_headers = HEADER.copy()
             pa_target = urlparse(url)
-            current_headers["Origin"] = f"https://{pa_target.netloc}"
-            current_headers["Referer"] = f"https://{pa_target.netloc}/"
+            current_headers["Origin"] = f"{pa_target.scheme}://{pa_target.netloc}"
+            current_headers["Referer"] = f"{pa_target.scheme}://{pa_target.netloc}/"
             is_json_string = rb and current_body.strip().startswith(('{', '['))
             if rb:
                 if is_json_string:
@@ -362,7 +362,7 @@ async def async_rate_test(url, num_reqs=100, method="GET", rb=None, rv=None, coo
                 
             print("Finishing up rate limiting test...")
             #wait for all responses to load properly
-            await asyncio.sleep(45.0)
+            await asyncio.sleep(50.0)
 
         #label every single request using enumerate() to find out exactly when the first request timed out, or hit a non-200.
         status_counts = {}
@@ -473,7 +473,7 @@ def main():
         init(autoreset=True)
         print()
         print("-" * 40)
-        print(f"{Style.BRIGHT}Endpointscanner {Fore.LIGHTMAGENTA_EX}v7.3.6")
+        print(f"{Style.BRIGHT}Endpointscanner {Fore.LIGHTMAGENTA_EX}v7.3.8")
         print("-" * 40)
         print()
     if args.no_duplicate_prog and not args.show_prog:
@@ -1091,7 +1091,7 @@ def main():
                                         if nested_netloc == target_netloc:
                                             nested_safe = True
                                         elif get_apex(nested_netloc) == get_apex(target_netloc):
-                                            if any(token in nested_netloc for token in ["assets.", "cdn."]):
+                                            if any(token in nested_netloc for token in ["assets.", "cdn.", "vendor."]):
                                                 nested_safe = True
                                                 
                                         if nested_safe and check_nested_url not in js_files:

{endpointscanner-7.3.6 → endpointscanner-7.3.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "endpointscanner"
-version = "7.3.6"
+version = "7.3.8"
 readme = "README.md"
 description = "Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs."
 requires-python = ">=3.9"