CWFF [-h] [--threads] [--github] [--subdomains] [--recursive] [--js-libraries] [--connected-websites] [--juicy-files] [--use-filter-model] [-o] domain positional arguments: domain Target website(ofc) optional arguments: -h, --help Show this help message and exit --threads The number of maximum concurrent threads to use (Default:1000) --github Collect endpoints from a given github repo (ex:https://github.com/google/flax) --subdomains Extract endpoints from subdomains also while search in the wayback machine! --recursive Work on extracted endpoints recursively (Adds more endpoints but less accurate sometimes)! --js-libraries Extract endpoints from JS libraries also, not just the JS written by them! --connected-websites Include endpoints extracted from connected websites --juicy-files Include endpoints extracted from jui cy files like sitemap.xml and robots.txt --use-filter-model Filter result endpoints with filter_model file -o The output directory for the endpoints and parameters. (Default: website name)
--juicy-filesflag, it would also extract endpoints from files like Sitemap.xml and robots.txt (Could add more in the future)
--githubflag, it would extract paths from that repo using Github API (No API key needed).
--connected-websitesflag, CWFF would use builtwith website API (Needs key but it's free) to extract the connected websites to the target from the relationship profile then extracts endpoints from these websites source.
Note: you can get your API key from this page and set the variable atAfter collecting endpoints from all these endpoints if you used the
--recursiveflag, CWFF would recursively extract parts from collected endpoints.
parseq/javadoc/1.1.0/comwill become all these endpoints:
parseq/javadoc/1.1.0/com parseq/javadoc/1.1.0/ parseq/javadoc/ parseq/ javadoc/ 1.1.0/ com
Note: all endpoints/parameters collected are cleaned and sorted with no duplicates to have a unique result.
filter_model.pyfile then use the
--use-filter-modelflag while starting CWFF. If you don't have an idea how to set this variables, see the comments I left in the file it's the one I mostly use and in the screenshot it lowered the number of collected endpoints from 26,177 to 3629. In case you forgot to use filtering while running CWFF, don't worry I got you covered
filter.pyto filter endpoints you have as the following way and it would load the
filter_model.pyfile automatically without having to rerun CWFF:
python filter.py wordlist.txt output.txt
python3 -m pip install -r requirements.txt python3 cwff.py --help
Дата: 2020-08-01 21:30:00