endpointscanner 7.3.7__tar.gz → 7.3.9__tar.gz

{endpointscanner-7.3.7 → endpointscanner-7.3.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: endpointscanner
-Version: 7.3.7
+Version: 7.3.9
 Summary: Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
 Project-URL: Homepage, https://github.com/SphericalFlower52811/endpointscanner
 Project-URL: Issues, https://github.com/SphericalFlower52811/endpointscanner/issues
@@ -17,7 +17,7 @@ Requires-Dist: httpx[http2]>=0.27.0
 Requires-Dist: colorama>=0.4.6
 Dynamic: license-file
 
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.7)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.9)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -245,6 +245,10 @@ Version 7.3.6 updated the script to exit if playwright browser does not exist.
 
 Version 7.3.7 was a patch that added vendor.example.com to subdomains to scan as it contains code for the website.
 
+version 7.3.8 gave more time for rate limiting test requests to settle.
+
+Version 7.3.9 removed /admin and /login from the built-in endpoints to test, as they would be removed from the unsorted list from --raw-output flag even if they were found in the javascript code. Also changed fake path to include a random hash behind in case people actually hardcoded such a path.
+
 ## Plans for next version and the future
 
 Version 7.4:

{endpointscanner-7.3.7 → endpointscanner-7.3.9}/README.md

@@ -1,4 +1,4 @@
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.7)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.9)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -226,6 +226,10 @@ Version 7.3.6 updated the script to exit if playwright browser does not exist.
 
 Version 7.3.7 was a patch that added vendor.example.com to subdomains to scan as it contains code for the website.
 
+version 7.3.8 gave more time for rate limiting test requests to settle.
+
+Version 7.3.9 removed /admin and /login from the built-in endpoints to test, as they would be removed from the unsorted list from --raw-output flag even if they were found in the javascript code. Also changed fake path to include a random hash behind in case people actually hardcoded such a path.
+
 ## Plans for next version and the future
 
 Version 7.4:

{endpointscanner-7.3.7 → endpointscanner-7.3.9}/endpointscanner.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: endpointscanner
-Version: 7.3.7
+Version: 7.3.9
 Summary: Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
 Project-URL: Homepage, https://github.com/SphericalFlower52811/endpointscanner
 Project-URL: Issues, https://github.com/SphericalFlower52811/endpointscanner/issues
@@ -17,7 +17,7 @@ Requires-Dist: httpx[http2]>=0.27.0
 Requires-Dist: colorama>=0.4.6
 Dynamic: license-file
 
-# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.7)
+# EndpointScanner: Website Endpoint Scanner and Rate Limit Tester (Version 7.3.9)
 
 A fast automated website reconnaissance tool that extracts endpoints, files, and even external links from websites. Automates IDOR and broken access control vulnerability testing through replacing variables with 1 in endpoints. Has a built in rate limit tester that can test on any endpoint, and can bypass simple WAFs/captchas and client-side SPAs.
 
@@ -245,6 +245,10 @@ Version 7.3.6 updated the script to exit if playwright browser does not exist.
 
 Version 7.3.7 was a patch that added vendor.example.com to subdomains to scan as it contains code for the website.
 
+version 7.3.8 gave more time for rate limiting test requests to settle.
+
+Version 7.3.9 removed /admin and /login from the built-in endpoints to test, as they would be removed from the unsorted list from --raw-output flag even if they were found in the javascript code. Also changed fake path to include a random hash behind in case people actually hardcoded such a path.
+
 ## Plans for next version and the future
 
 Version 7.4:

{endpointscanner-7.3.7 → endpointscanner-7.3.9}/enumerateendpoint.py

@@ -257,8 +257,8 @@ async def async_rate_test(url, num_reqs=100, method="GET", rb=None, rv=None, coo
         if not rh:
             current_headers = HEADER.copy()
             pa_target = urlparse(url)
-            current_headers["Origin"] = f"https://{pa_target.netloc}"
-            current_headers["Referer"] = f"https://{pa_target.netloc}/"
+            current_headers["Origin"] = f"{pa_target.scheme}://{pa_target.netloc}"
+            current_headers["Referer"] = f"{pa_target.scheme}://{pa_target.netloc}/"
             is_json_string = rb and current_body.strip().startswith(('{', '['))
             if rb:
                 if is_json_string:
@@ -362,7 +362,7 @@ async def async_rate_test(url, num_reqs=100, method="GET", rb=None, rv=None, coo
                 
             print("Finishing up rate limiting test...")
             #wait for all responses to load properly
-            await asyncio.sleep(45.0)
+            await asyncio.sleep(50.0)
 
         #label every single request using enumerate() to find out exactly when the first request timed out, or hit a non-200.
         status_counts = {}
@@ -473,7 +473,7 @@ def main():
         init(autoreset=True)
         print()
         print("-" * 40)
-        print(f"{Style.BRIGHT}Endpointscanner {Fore.LIGHTMAGENTA_EX}v7.3.6")
+        print(f"{Style.BRIGHT}Endpointscanner {Fore.LIGHTMAGENTA_EX}v7.3.9")
         print("-" * 40)
         print()
     if args.no_duplicate_prog and not args.show_prog:
@@ -623,9 +623,8 @@ def main():
     SENSITIVE_ENDPOINT = {
         "/.env", "/.env.local", "/.env.production", "/.env.development", ".env.dev",
         "/.git/config", "/.git/HEAD", "/package.json", "/package-lock.json", "/.npmrc", "/.dockerenv",
-        "/.gitignore", "/api/health", "/admin", "/login", "/config",
-        "/.env.example", "/docker-compose.yml", "/.babelrc", "/.eslintrc.json",
-        "/wp-config.php", "/config.json", "/.aws/credentials", "/.git/index",
+        "/.gitignore", "/api/health", "/config", "/.env.example", "/docker-compose.yml", "/.babelrc", 
+        "/.eslintrc.json", "/wp-config.php", "/config.json", "/.aws/credentials", "/.git/index",
         "/etc/passwd"
     }
     
@@ -866,7 +865,9 @@ def main():
     #identify js stacks.
     js_stack = []
     identify_javascript_type(html=main_html, headers=None, current_stack=js_stack)
-    fake_path = "/very-fake-page-123456123456abcdefg"
+    #add randomly generated hash later/tomorrow.
+    import secrets
+    fake_path = f"/very-fake-page-123456123456abcdefg_{secrets.token_hex(16)}"
     fake_url = urljoin(target, fake_path)
     try:
         fake_res = requests.get(fake_url, cookies=session_cookies, headers=HEADER, impersonate=impersonate_settings, timeout=10)
@@ -1258,6 +1259,8 @@ def main():
                 except (KeyboardInterrupt, SystemExit):
                     print("\nScan cancelled by user.")
                     return
+        else:
+            print(f"Endpoints Found: {len(found_paths) - len(SENSITIVE_ENDPOINT)}")
 
                 
         if not args.raw_output:
@@ -1631,8 +1634,8 @@ def main():
                     print(f"\nFailed to write file: {e}")
         else:
             if not args.only_res:
-                print("Endpoints will not be sorted. Sensitive endpoints like '.git/config' will be automatically skipped.")
-                print('----Raw Endpoints----')
+                print("\nEndpoints will not be sorted. Sensitive endpoints like '.git/config' will be automatically skipped.\n")
+                print('----Raw Endpoints----\n')
             clean_found_paths = []
             #delete all sensitive endpoints, as they are not sorted and may be misleading that all are exposed.
             for p in unsorted_paths:

{endpointscanner-7.3.7 → endpointscanner-7.3.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "endpointscanner"
-version = "7.3.7"
+version = "7.3.9"
 readme = "README.md"
 description = "Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs."
 requires-python = ">=3.9"