You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+12-6Lines changed: 12 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
# wsee
2
-
A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but more focused on `CloudFlare` and `CloudFront` CDN. This tool provides multiple technique to ensure target endpoint can fall under specific protocol, indicated via `101` statuses. Can be used for **Bug Hunters** to find any delicate domain related to CDN especially on FreeNet / Free Internet fields.
2
+
A CDN Domain Fronting Tool or Websocket Discovery. This tool provides multiple technique to ensure target endpoint can fall under specific protocol, indicated via `101` statuses. Can be used for **Bug Hunters** to find any delicate domain related to CDN. Should work on any CDN but only featured `Cloudflare` and `Cloudfront` as in-built ready to use.
3
3
4
4
## Features
5
5
-`wsee: to go` an Easy to use, scans whenever needed with Clean interactive Python script. Usable across any device that supports for `python`. PS: Even work on `Termux` and `WSL`.
@@ -9,9 +9,10 @@ A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but mo
9
9
-***Don't have a wordlist?*** : `wsee` got you covered with `Online Subdomain Enumeration` feature using `HackerTarget` as source.
10
10
- Accept `.csv` as wordlist, breaking the barrier of must used `.txt` and made it compatible for other Enumeration Tool Output.
11
11
- Supports for Internal Storage for `Termux` users.
12
-
- Supports for HTTP2 Protocol Upgrade indicated as `h2c`.
12
+
- Supports for `HTTP/2` Protocol (clear-text only).
13
13
- New `Rotate` Mode feature; Now you can rotate `proxy` and `hostname` individually. This is useful if the target only accept specific proxy or ssl masking.
14
14
- Auto script updater handled with config located in `.wsee/CONFIG`
15
+
- Also include `Normal` mode, to find SSL/Direct bugs without protocol or domain fronting.
15
16
- New Enhancement each Updates
16
17
17
18
# How it works
@@ -20,7 +21,7 @@ The tool works; is by following the general idea of Upgrading protocol indicated
Even though it uses a basic headers, some Endpoint are Headers dependant. In `websocket` for example; it may require `X-SS` or `Sec-` or `User-Agent` entry in order upgrade connection to be accepted by the server, this usually happen on `Amazon` endpoints. Make sure to add those manually into the headers and the script will do the rest.
24
+
Even though it uses a basic header, some Endpoint are Headers dependant. In `websocket` for example; it may require `X-SS` or `Sec-` or `User-Agent` entry in order upgrade connection to be accepted by the server, this usually happen on `Amazon` endpoints. Make sure to add those manually into the headers and the script will do the rest.
24
25
25
26
##### **SSL Failure**
26
27
In the newer version of `OpenSSL`; it doesn't support `Legacy Connection` and consider it as an exception. Due to this, you need to install custom OpenSSL Config by simply define it into your environment variable:
@@ -45,7 +46,7 @@ For Termux users; you can now takes input from Internal Storage. `Termux` is abl
45
46
termux-setup-storage
46
47
```
47
48
##### **Disable Update**
48
-
Latest releases introduce auto-update feature. It's a small feature but you're now no longer needs to scrape whole directory to install new releases. You can just change `true` statement into `false` inside wsee config located in `.wsee/CONFIG`:
49
+
Latest releases introduce auto-update feature. It's a small feature but now, you're no longer need to scrape the whole directory to install new releases. To `Disable` it: You can just change `true` statement into `false` inside **WSee** config located in `.wsee/CONFIG`:
49
50
```
50
51
{
51
52
"config":{
@@ -55,7 +56,7 @@ Latest releases introduce auto-update feature. It's a small feature but you're n
55
56
```
56
57
57
58
# Installation
58
-
`wsee` uses 3rd-party module, make sure to install `requests` before running, or else:
59
+
**WSee** uses 3rd-party module, make sure to install `requests` before running, or else:
59
60
```
60
61
apt install python3, python3-pip
61
62
apt install git
@@ -71,7 +72,12 @@ This Repo is build on top of other works, I'm not a jerk that steals other peopl
71
72
- Thanks to [@fdxreborn](https://github.com/fdxreborn) for letting me to enhance his tools. This Repo is built on top of his awesome works at [cfchecker](https://github.com/fdxreborn/cfchecker)
72
73
- Also thanks to [@PalindromeLabs](https://github.com/PalindromeLabs) for ZGrab uses in Websocket Discovery. This repo borrows some material from [STEWS: Security Testing and Enumeration of WebSockets](https://github.com/PalindromeLabs/STEWS)
73
74
74
-
You can also support my work by offering me some free Doughnut xD:
75
+
# Contribute
76
+
You can also contribute to this project by creating a pull-request or donating some CDN domain. Your contribution will be listed in our [Guild](https://github.com/Guild-Net) as-well in future content related to **WSee**. Currently; we're looking for `(GCP) Google Cloud Platform`, `Akamai` and `Fastly` CDN Domain. Alternatively, you can also support my work by offering me some free Doughnut xD:
75
77
https://saweria.co/mc874
76
78
79
+
**Do note that** :
80
+
- Your CDN domain will be used for `domain-fronting` purposes.
81
+
- The risk of being public should be taken as personal consideration.
0 commit comments