zgrab2-http
Fast Go Application Scanner
Details
Category: Recon
Publisher: trickest-mhmdiaa
Created Date: 4/12/2023
Container: quay.io/trickest/zgrab2-http:82b0038
Source URL: https://github.com/zmap/zgrab2
Parameters
Command:
--sct - Request Signed Certificate Timestamps during TLS HandshakeCommand:
--port - Specify port to grab on (default: 80)Command:
--time - Explicit request time to use, instead of clock. YYYYMMDDhhmmss format.Command:
--debug - Include debug fields in the output.Command:
--flush - Flush after each line of output.Command:
Command:
--method - Set HTTP request method type (default: GET)Command:
--no-sni - Do not send domain name in TLS Handshake regardless of whether knownCommand:
--senders - Number of send goroutines to use (default: 1000)Command:
--timeout - Set connection timeout (0 = no timeout) (default: 10s)Command:
--trigger - Invoke only on targets with specified tagCommand:
--endpoint - Send an HTTP request to an endpoint (default: /)Command:
--max-size - Max kilobytes to read in response to an HTTP request (default: 256)Command:
--maxbytes - Maximum byte read limit per scan (0 = defaults)Command:
--no-ecdhe - Do not allow ECDHE handshakesCommand:
--root-cas - Set of certificates to use when verifying server certificatesCommand:
--use-https - Perform an HTTPS connection on the initial hostCommand:
--gomaxprocs - Set GOMAXPROCS (default: 0)Command:
--heartbleed - Check if server is vulnerable to HeartbleedCommand:
Command:
--prometheus - Address to use for Prometheus server (e.g. localhost:8080). If empty, Prometheus is disabledCommand:
--user-agent - Set a custom user agent (default: Mozilla/5.0 zgrab/0.x)Command:
--dsa-enabled - Accept server DSA keysCommand:
--max-version - The maximum SSL/TLS version that is acceptable. 0 means use the highest supported value.Command:
--min-version - The minimum SSL/TLS version that is acceptable. 0 means that SSLv3 is the minimum.Command:
--next-protos - A list of supported application-level protocolsCommand:
--retry-https - If the initial request fails, reconnect and try with HTTPS.Command:
--server-name - Server name used for certificate verification and (optionally) SNICommand:
--certificates - Set of certificates to present to the serverCommand:
--cipher-suite - A comma-delimited list of hex cipher suites to advertise.Command:
--client-hello - Set an explicit ClientHello (base64 encoded)Command:
--client-random - Set an explicit Client Random (base64 encoded)Command:
--max-redirects - Max number of redirects to follow (default: 0)Command:
--session-ticket - Send support for TLS Session Tickets and output ticket if presentedCommand:
--with-body-size - Enable the body_size attribute, for how many bytes actually readCommand:
--certificate-map - A file mapping server names to certificatesCommand:
--extended-random - Send TLS Extended Random ExtensionCommand:
--keep-client-logs - Include the client-side logs in the TLS handshakeCommand:
--curve-preferences - A list of elliptic curves used in an ECDHE handshake, in order of preference.Command:
--heartbeat-enabled - If set, include the heartbeat extensionCommand:
--override-sig-hash - Override the default SignatureAndHashes TLS option with more expansive defaultCommand:
--redirects-succeed - Redirects are always a success, even if max-redirects is exceededCommand:
--fail-http-to-https - Trigger retry-https logic on known HTTP/400 protocol mismatch responsesCommand:
--read-limit-per-host - Maximum total kilobytes to read for a single host (default 96kb) (default: 96)Command:
--connections-per-host - Number of times to connect to each host (results in more output) (default: 1)Command:
--custom-headers-names - CSV of custom HTTP headers to send to serverCommand:
--signature-algorithms - Signature and hash algorithms that are acceptableCommand:
--custom-headers-values - CSV of custom HTTP header values to send to server. Should match order of custom-headers-namesCommand:
--extended-master-secret - Offer RFC 7627 Extended Master Secret extensionCommand:
--custom-headers-delimiter - Delimiter for customer header name/value CSVsCommand:
--verify-server-certificate - ail if the server certificate does not match the server-name, or does not chain to a trusted root.Command:
--follow-localhost-redirects - Follow HTTP redirects to localhostCommand:
--compute-decoded-body-hash-algorithm - Choose algorithm for BodyHash field (sha256 or sha1)