Skip to content
/ Demon Public

Demon is a powerful browser crawler for web vulnerability scanners

License

Notifications You must be signed in to change notification settings

baerwang/Demon

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

51 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Demon

Daemon is a browser crawler that does URL harvesting in chrome headless mode

Quick Start

Run

Demon needs chromium, Please confirm that the environment is installed

./demon --target http://testphp.vulnweb.com

Use chromium

./demon --target http://testphp.vulnweb.com chromium /tmp/chromium/chrome

More command parameters

./demon -h

Roadmap

  • Robots

  • Sitemap.xml

  • Javascript Content

  • Custom Headers

  • Proxy

  • Form

  • Click

  • Auto Random filling

  • Http auth (Basic,Digest,NTLM)

  • Auto login

  • Weak Cryptography

  • Scan Policy

    1. current site (default)
    2. all website
    3. subdomain
    4. not subdomain
    5. directory
  • Random User-Agent

  • Duplicate detection Policy

    1. params
    2. params+method (default)
    3. params+method+body(xml,json)
  • AI Captcha

  • Output Policy

    1. JSON
    2. Redis