Bashter

Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)

About:

Bashter is a tool for scanning a Web-based Application. Bashter is very suitable for doing Bug Bounty or Penentration Testing. It is designed like a framework so you can easily add a script for detect vulnerability.

For Example

You can add something script like this:

${BASHTER_HOME}/parts/form/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}

${BASHTER_HOME}/parts/url/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}

${BASHTER_HOME}/parts/header/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE}

For the sample, you can follow existing scripts.

Disable Script

You only need to change the extension, for example .bash => .xbash.

by Default:

• Detect Form Input
• Detect CORS Missconfiguration
• Detect X-FRAME-OPTIONS missing (Clickjacking Potential)
• Detect Reflected XSS via URL
• Detect Reflected XSS via Form

Tested on:

How to Install:

git clone https://github.com/zerobyte-id/Bashter.git

cd Bashter/

bash setup.bash

Contributor:

• Schopath a.k.a Ophan (@panophan)
• Suhada (@suhada99)
• Abay (@abaykan)

EOF

www.zerobyte.id