Name:katana
Category:Discovery
Publisher:trickest-mhmdiaa
Created:11/7/2022
Container:quay.io/trickest/katana:v1.1.1-patch-2
Output Type:
License:Unknown

Parameters

url
string
required
-utarget url
list
file
required
-listtarget url list
debug
boolean
-debugdisplay debug output
delay
string
-delayrequest delay between each request in seconds
depth
string
-depthmaximum depth to crawl (default 3)
field
string
-fieldfield to display in output (url,path,fqdn,rdn,rurl,qurl,qpath,file,ufile,key,value,kv,dir,udir)
jsonl
boolean
-jsonlwrite output in JSONL(ines) format
proxy
string
-proxyhttp/socks5 proxy to use
retry
string
-retrynumber of times to retry the request (default 1)
config
file
-configpath to the katana configuration file
resume
file
-resumeresume scan using resume.cfg
silent
boolean
-silentdisplay output only
exclude
string
-excludeexclude host matching specified filter ('cdn', 'private-ips', cidr, ip, regex)
headers
string
-headerscustom header/cookie to include in request
jsluice
boolean
-jsluiceenable jsluice parsing in javascript file (memory intensive)
timeout
string
-timeouttime to wait for request in seconds (default 10)
verbose
boolean
-verbosedisplay verbose output
headless
boolean
-headlessenable headless hybrid crawling (experimental)
js-crawl
boolean
-js-crawlenable endpoint parsing / crawling in javascript file
no-scope
boolean
-no-scopedisables host based default scope
omit-raw
boolean
-omit-rawomit raw requests/responses from jsonl output
strategy
string
-strategyVisit strategy (depth-first, breadth-first) (default depth-first)
omit-body
boolean
-omit-bodyomit response body from jsonl output
resolvers
string
-resolverslist of custom resolver (file or comma separated)
no-sandbox
boolean
-no-sandboxstart headless chrome in --no-sandbox mode
rate-limit
string
-rate-limitmaximum requests to send per second (default 150)
concurrency
string
-concurrencynumber of concurrent fetchers to use (default 10)
crawl-scope
string
-crawl-scopein scope url regex to be followed by crawler
field-scope
string
-field-scopepre-defined scope field (dn,rdn,fqdn) or custom regex (e.g., '(company-staging.io|company.com)') (default rdn)
form-config
file
-form-configpath to custom form configuration file
known-files
string
-known-filesenable crawling of known files (all,robotstxt,sitemapxml)
match-regex
string
-match-regexregex to match on output url
parallelism
string
-parallelismnumber of concurrent inputs to process (default 10)
store-field
string
-store-fieldfield to store in per-host output (url,path,fqdn,rdn,rurl,qurl,qpath,file,ufile,key,value,kv,dir,udir)
field-config
file
-field-configpath to custom field configuration file
filter-regex
string
-filter-regexregex to filter on output url
headers-file
file
-headerscustom header/cookie to include in request
health-check
boolean
-health-checkrun diagnostic check up
no-incognito
boolean
-no-incognitostart headless chrome without incognito mode
crawl-duration
string
-crawl-durationmaximum duration to crawl the target for (s, m, h, d) (default s)
xhr-extraction
boolean
-xhr-extractionextract xhr request url,method in jsonl output
chrome-data-dir
folder
-chrome-data-dirpath to store chrome browser data
crawl-out-scope
string
-crawl-out-scopeout of scope url regex to be excluded by crawler
extension-match
string
-extension-matchmatch output for given extension (eg, -em php,html,js)
form-extraction
boolean
-form-extractionextract form, input, textarea & select elements in jsonl output
match-condition
string
-match-conditionmatch response with dsl based condition
tls-impersonate
boolean
-tls-impersonateenable experimental client hello (ja3) tls randomization
crawl-scope-file
file
-crawl-scopein scope url regex to be followed by crawler
extension-filter
string
-extension-filterfilter output for given extension (eg, -ef png,css)
filter-condition
string
-filter-conditionfilter response with dsl based condition
headless-options
string
-headless-optionsstart headless chrome with additional options
match-regex-file
file
-match-regexlist of regex to match on output url
disable-redirects
boolean
-disable-redirectsdisable following redirects (default false)
display-out-scope
boolean
-display-out-scopedisplay external endpoint from scoped crawling
filter-regex-file
file
-filter-regexlist of regex to filter on output url
max-response-size
string
-max-response-sizemaximum response size to read (default 9223372036854775807)
rate-limit-minute
string
-rate-limit-minutemaximum number of requests to send per minute
automatic-form-fill
boolean
-automatic-form-fillenable automatic form filling (experimental)
ignore-query-params
boolean
-ignore-query-paramsIgnore crawling same path with different query-param values
crawl-out-scope-file
file
-crawl-out-scopeout of scope url regex to be excluded by crawler