Name:kiterunner
Category:Discovery
Publisher:trickest
Created:11/13/2021
Container:quay.io/trickest/kiterunner:7d5824c-patch-1
Output Type:
License:Unknown

Parameters

delay
string
--delayDelay to place inbetween requests to a single host
hosts
file
required
Target hosts
quiet
boolean
--quietQuiet mode. will mute unecessarry pretty text
--headerHeaders to add to requests (default [x-forwarded-for: 127.0.0.1])
output
string
--outputOutput format. Can be json,text,pretty (default pretty)
kb-mode
boolean
kbKb mode. Manipulate the kitebuilder schema
timeout
string
--timeoutTimeout to use on all requests (default 3s)
verbose
string
--verboseLevel of logging verbosity. can be error,info,debug,trace (default info)
wordlist
file
required
-wNormal/ogl wordlist to use for scanning
scan-mode
boolean
required
scanScan mode.
brute-mode
boolean
required
bruteBruteforce mode.
filter-api
string
--filter-apiOnly scan apis matching this ksuid
user-agent
string
--user-agentUser agent to use for requests (default Chrome. Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36)
config-file
file
--configSpecify the config file.
force-method
string
--force-methodWhether to ignore the methods specified in the ogl file and force this method
profile-name
string
--profile-nameName for profile output file
ignore-length
string
--ignore-lengthA range of content length bytes to ignore. you can have multiple. e.g. 100-105 or 1234 or 123,34-53. This is inclusive on both ends
kb-mode-debug
boolean
-dDebug mode will attempt to convert the schema with error handling
kb-mode-parse
file
parseParse an kitebuilder schema and print out the prettified data
max-redirects
string
--max-redirectsMaximum number of redirects to follow (default 3)
wordlist-mode
boolean
wordlistWordlist mode. Look at your cached wordlists and remote wordlists
kb-mode-replay
string
replayReplay a kitebuilder request based on the input
kb-mode-convert
file
convertonvert an input file format into the specified output file format
preflight-depth
string
--preflight-depthWhen performing preflight checks, what directory depth do we attempt to check. 0 means that only the docroot is checked (default 1)
blacklist-domain
string
--blacklist-domainDomains that are blacklisted for redirects. We will not follow redirects to these domains
disable-precheck
boolean
--disable-precheckWhether to skip host discovery
kitebuilder-list
file
--kitebuilder-listOgl wordlist to use for scanning
fail-status-codes
string
--fail-status-codesWhich status codes blacklist as fail. if this is set, this will override success-status-codes
assetnote-wordlist
string
required
--assetnote-wordlistUse the wordlists from wordlist.assetnote.io. specify the type/name to use, e.g. apiroutes-210228. You can specify an additional maxlength to use only the first N values in the wordlist, e.g. apiroutes-210228;20000 will only use the first 20000 lines in that wordlist
max-parallel-hosts
string
--max-parallel-hostsMax number of concurrent hosts to scan at once (default 50)
wildcard-detection
string
--wildcard-detectionCan be set to false to disable wildcard redirect detection (default true)
wordlist-mode-list
boolean
listList the wordlists cached and available
wordlist-mode-save
string
saveSave the wordlists specified (full filename or alias)
quarantine-threshold
string
--quarantine-thresholdIf the host return N consecutive hits, we quarantine the host as wildcard. Set to 0 to disable (default 10)
success-status-codes
string
--success-status-codesWhich status codes whitelist as success. this is the default mode
brute-mode-extensions
string
--extensionsExtensions to append while scanning
kitebuilder-full-scan
boolean
--kitebuilder-full-scanPerform a full scan without first performing a phase scan.
max-connection-per-host
string
--max-connection-per-hostMax connections to a single host (default 3)
kb-mode-compile-wordlist
file
compileCompile an kitebuilder schema and write the data to the specified file
brute-mode-dirsearch-compat
boolean
--dirsearch-compatThis will replace %EXT% with the extensions provided. backwards compat with dirsearch because shubs loves him some dirsearch
kb-mode-compile-output-file
string
kb-mode-convert-output-file-format
string
kb mode convert mode output file format