crithit

Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall (WAF) bans and to allow brute forcing to run faster than it normally would when approaching any single host with multiple simultaneous requests.

Name:crithit

Category:Fuzzing

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/crithit:35f3621

Output Type:

License:Unknown

Source:View Source

Parameters

proxy · file

--proxyA file containing list of proxy names and port [IP:port].

target · string · required

--targetThe target URL.

verify · string

--verifyVerify successful results with different proxies.

threads · string

--threadsNumber of threads to use (default: 4).

verbose · boolean

--verboseBe verbose with output.

read-for · string

--read-forWait N seconds to receive data from server (default: 10).

wait-for · string

--wait-forWait N seconds to connect/send data to server (default: 5).

word-list · file · required

--word-list(required) A filename containing list of words to use.

exceptions · file

--exceptionsFile containing words.

signatures · file · required

--signaturesFile containing list of signatures to look out for in top-level domains.

max-sockets · string

--max-socketsNumber of sockets to use.

statuscodes · string

--statuscodesPositive status codes (will be overwritten with statuscodesblacklist if set) (default: 200,204,301,302,307,401,403,408).

target-list · file · required

--target-listA file containing the list of targets.

randomize-agent · boolean

--randomize-agentUse random user agents for requests.

statuscodesblacklist · string

--statuscodesblacklistNegative status codes (will override statuscodes if set).