Solves the issue of duplicate or uninteresting urls for pentest or bugbounty
It doesn't make any http requests to the URLs and removes:
- human written content e.g. blog posts
- urls with same path but parameter value difference
- incremental urls e.g.
/cat/1/
and/cat/2/
- image, js, css and other static files
go get -u github.com/felipemelchior/gouro
Good to use in oneliners
echo "domain.com" | assetfinder -subs-only | waybackurls | gouro | gf xss
Go implementation of https://github.com/s0md3v/uro/