Scroll to navigation

turbosearch(1) Wordlist url search tool turbosearch(1)

NAME

turbosearch - wordlist url search tool

OPTIONS



 turbosearch [OPTION]

DESCRIPTION

The program was developed in Python, brute force style, with the purpose of performing a search in a list of words.

Supports multi-threading, that is, several simultaneous connections, speeding up the search process.

USAGE

optional arguments:

show this help message and exit

General Setting:

target url (ex: http://10.10.10.10/path)
word list to be tested
number of connects in parallel (per host, default: 16)
save output to disk (default: none)
Append each request with this extensions (comma-separated values)

Custom Settings:

restore a previous aborted/crashed session
ignore an existing restore file (don't wait 10 seconds)
multiply a payload set to search 2 path levels (ex: word1/word2)
target proxy URL (ex: http://127.0.0.1:8080)
target proxy URL to report only successful requests (ex: http://127.0.0.1:8080)
Deep Search: Look for URLs inside of HTML results
Shows more options (-h -v). Prints commands and outputs. (default: quiet)
Print full requested URLs (default: no)
Disable forward to Location response address (default: no)
ignore resuts by result code or/and size (ex1: 302 or ex2: 302:172 or ex3: 405,302:172)
Text to find in content or header (comma-separated values)
Specify request method (default: GET). Available methods: GET, POST,PUT, PATCH, HEAD, OPTIONS, all or comma-separated values
Use randomly selected HTTP User-Agent header value (default: no)
JSON-formatted header key/value (ex: '{"PHPSESSID": "gvksi1cmjl2kqgntqof19sh823"}')
Case Insensitive search: put all wordlist in lower case
Save reported URI at SQLite local database called stats.db (default: no)
Not look for robots.txt (default: no)

Word List Options:

Search for a MD5 Hash version of each word (default: no)
Search for a SHA1 Hash version of each word (default: no)
Search for a SHA256 Hash version of each word (default: no)
In case of Hash Search be enabled, also search by Uppercase of Hash Hex Text (default: no)
Do not check duplicate words in wordlist. Use in case of big wordlists (default: False)

EXAMPLES

Utilization samples:



    turbosearch -t http://10.10.10.10/ -w /usr/share/dirb/wordlists/big.txt


    turbosearch -t http://10.10.10.10/ -w /usr/share/dirb/wordlists/big.txt -x .html,.xml,.php,.txt


    turbosearch -t http://10.10.10.10/ -w /usr/share/dirb/

AUTHORS

Written by Hélvio Junior (aka M4v3r1ck) <helvio_junior@hotmail.com>

This manual page was written by Josenilson Ferreira da Silva <nilsonfsilva@hotmail.com>

for the Debian project (but may be used by others).

DEZ 2022 TURBOSEARCH 0.1.25