bfac
BFAC (Backup File Artifacts Checker) is an automated tool that checks for backup artifacts that may disclose the web-application’s source code. The artifacts can also lead to leakage of sensitive information, such as passwords, directory structure, etc.
Name:bfac
Category:Discovery
Publisher:trickest
Created:6/23/2021
Container:
quay.io/trickest/bfac:18fb0b5
Output Type:
License:Unknown
Source:View Source
Parameters
--host
HTTP host header value-level
Choose level--proxy
Proxy authentication credentials (name:password).--cookie
HTTP cookie header value--timeout
HTTP request timeout in seconds (default:5)--list
Check a list of URLs--proxy-file
Use a proxy list file-u
Check a single URL-ua
HTTP User-Agent header value--request-rate-throttling
Request rate throttling per second (default: 30)--no-text
Show the results only--headers
Extra headers (e.g. Accept-Language: fr
ETag: 123)--dvcs-test
Limit the test to exposed DVCS tests--user-agents-file
Use a User-Agents file-xsc
Specify status codes to exclude, separated by commas--invalid-content-length
Manually specify the invalid Content-Length, instead of performing this check automatically.--technique
Technique to verify the availability of the file. (options: status_code, content_length, all) (default: all)--invalid-content-length-offset
Manually specify the Content-Length offset for invalid pages (default: 50).