Install • Usage • Examples • Join Discord
▶ GO111MODULE=on go get -v github.com/ethicalhackingplayground/tprox/tprox▶ git clone https://github.com/ethicalhackingplayground/tprox && cd tprox && docker build -t tprox .▶ tprox -h▶ docker run tprox -hThis will display help for the tool. Here are all the switches it supports.
👉 tprox help menu 👈
Usage of ./tprox:
-c int
The number of concurrent requests (default 10)
-check
Check if a path/folder/file is internal
-crawl
crawl the resolved domain while testing for proxy misconfigs
-depth int
The crawl depth (default 5)
-discover
Discover path/folder/file with already found traversal
-o string
Output the results to a file
-progress
This flag will allow you to turn on the progress bar
-regex string
Filter crawl with regex pattern
-scope string
Specify a scope to crawl with in using regexs
-silent
Show Silent output
-test
Enable/Disable test mode only
-traverse
This flag will allow you to turn on traversing
-w string
The wordlist to use against a valid endpoint to traverse
▶ echo "https://example.com/api/v1" | tprox -w wordlist -traverse▶ echo "https://example.com" | tprox -w wordlist -crawl -traverse▶ echo "https://example.com" | tprox -w wordlist -crawl -traverse -regex "/api/"▶ echo "https://example.com" | tprox -w wordlist -crawl -traverse -regex "/api/" -scope ".*.\.example.com"▶ echo "https://example.com/api" | tprox -test -traverse▶ echo "https://example.com/api/internalfile.html" | tprox -check▶ echo "https://example.com/api/..%2f" | tprox -discover -progress -w wordlist
- Added some additional flags to help aid finding traversal misconfigurations
- Optimised the crawler
- Added a flag to disable/enable the progress bar
- Fixed the silent flag
- Added check,test & discover flags
- Fixed a crawling bug.
- Fixed a traversal bug, it now only prints internal files & endpoints very low % of false positives.
- Made some optimization fixes.
- Discover content fix, it was not finding content.
- Optimisation fixes.
if for some reason the program fails to install or update run:
sudo rm -r /home/<user-name>/go/pkg/mod/github.com/ethicalhackingplayground/tprox
go clean --modcache
go cleanThen try and install it again.
Tprox is distributed under MIT License
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent