Skip to content

Commit 6ce9fb3

Browse files
author
MC874
committed
chore: Release
- Added contribute section to docs - Update and Minor Fix for documentation - Remove unused dev testing - Migrate wseye to wsee - Bump version ;
1 parent 80c4875 commit 6ce9fb3

File tree

4 files changed

+180
-150
lines changed

4 files changed

+180
-150
lines changed

.wsee/VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
1.10.0
1+
1.11.0

README.md

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# wsee
2-
A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but more focused on `CloudFlare` and `CloudFront` CDN. This tool provides multiple technique to ensure target endpoint can fall under specific protocol, indicated via `101` statuses. Can be used for **Bug Hunters** to find any delicate domain related to CDN especially on FreeNet / Free Internet fields.
2+
A CDN Domain Fronting Tool or Websocket Discovery. This tool provides multiple technique to ensure target endpoint can fall under specific protocol, indicated via `101` statuses. Can be used for **Bug Hunters** to find any delicate domain related to CDN. Should work on any CDN but only featured `Cloudflare` and `Cloudfront` as in-built ready to use.
33

44
## Features
55
- `wsee: to go` an Easy to use, scans whenever needed with Clean interactive Python script. Usable across any device that supports for `python`. PS: Even work on `Termux` and `WSL`.
@@ -9,9 +9,10 @@ A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but mo
99
- ***Don't have a wordlist?*** : `wsee` got you covered with `Online Subdomain Enumeration` feature using `HackerTarget` as source.
1010
- Accept `.csv` as wordlist, breaking the barrier of must used `.txt` and made it compatible for other Enumeration Tool Output.
1111
- Supports for Internal Storage for `Termux` users.
12-
- Supports for HTTP2 Protocol Upgrade indicated as `h2c`.
12+
- Supports for `HTTP/2` Protocol (clear-text only).
1313
- New `Rotate` Mode feature; Now you can rotate `proxy` and `hostname` individually. This is useful if the target only accept specific proxy or ssl masking.
1414
- Auto script updater handled with config located in `.wsee/CONFIG`
15+
- Also include `Normal` mode, to find SSL/Direct bugs without protocol or domain fronting.
1516
- New Enhancement each Updates
1617

1718
# How it works
@@ -20,7 +21,7 @@ The tool works; is by following the general idea of Upgrading protocol indicated
2021
```
2122
headers = { "Connection": "Upgrade", "Upgrade": protocol }
2223
```
23-
Even though it uses a basic headers, some Endpoint are Headers dependant. In `websocket` for example; it may require `X-SS` or `Sec-` or `User-Agent` entry in order upgrade connection to be accepted by the server, this usually happen on `Amazon` endpoints. Make sure to add those manually into the headers and the script will do the rest.
24+
Even though it uses a basic header, some Endpoint are Headers dependant. In `websocket` for example; it may require `X-SS` or `Sec-` or `User-Agent` entry in order upgrade connection to be accepted by the server, this usually happen on `Amazon` endpoints. Make sure to add those manually into the headers and the script will do the rest.
2425

2526
##### **SSL Failure**
2627
In the newer version of `OpenSSL`; it doesn't support `Legacy Connection` and consider it as an exception. Due to this, you need to install custom OpenSSL Config by simply define it into your environment variable:
@@ -45,7 +46,7 @@ For Termux users; you can now takes input from Internal Storage. `Termux` is abl
4546
termux-setup-storage
4647
```
4748
##### **Disable Update**
48-
Latest releases introduce auto-update feature. It's a small feature but you're now no longer needs to scrape whole directory to install new releases. You can just change `true` statement into `false` inside wsee config located in `.wsee/CONFIG`:
49+
Latest releases introduce auto-update feature. It's a small feature but now, you're no longer need to scrape the whole directory to install new releases. To `Disable` it: You can just change `true` statement into `false` inside **WSee** config located in `.wsee/CONFIG`:
4950
```
5051
{
5152
"config":{
@@ -55,7 +56,7 @@ Latest releases introduce auto-update feature. It's a small feature but you're n
5556
```
5657

5758
# Installation
58-
`wsee` uses 3rd-party module, make sure to install `requests` before running, or else:
59+
**WSee** uses 3rd-party module, make sure to install `requests` before running, or else:
5960
```
6061
apt install python3, python3-pip
6162
apt install git
@@ -71,7 +72,12 @@ This Repo is build on top of other works, I'm not a jerk that steals other peopl
7172
- Thanks to [@fdxreborn](https://github.com/fdxreborn) for letting me to enhance his tools. This Repo is built on top of his awesome works at [cfchecker](https://github.com/fdxreborn/cfchecker)
7273
- Also thanks to [@PalindromeLabs](https://github.com/PalindromeLabs) for ZGrab uses in Websocket Discovery. This repo borrows some material from [STEWS: Security Testing and Enumeration of WebSockets](https://github.com/PalindromeLabs/STEWS)
7374

74-
You can also support my work by offering me some free Doughnut xD:
75+
# Contribute
76+
You can also contribute to this project by creating a pull-request or donating some CDN domain. Your contribution will be listed in our [Guild](https://github.com/Guild-Net) as-well in future content related to **WSee**. Currently; we're looking for `(GCP) Google Cloud Platform`, `Akamai` and `Fastly` CDN Domain. Alternatively, you can also support my work by offering me some free Doughnut xD:
7577
https://saweria.co/mc874
7678

79+
**Do note that** :
80+
- Your CDN domain will be used for `domain-fronting` purposes.
81+
- The risk of being public should be taken as personal consideration.
82+
7783
<p align="center"><img alt="Preview" src="https://i.postimg.cc/bYkbMnFQ/Screenshot-2022-05-23-16-40-37-84.jpg"></p>

0 commit comments

Comments
 (0)