A fast, multi-threaded Go program designed for discovering hidden web directories and testing HTTP methods on each directory. The program sends requests using various HTTP methods (GET, POST, PUT, DELETE, OPTIONS, HEAD) and shows detailed response information, including status codes and headers.
- Multi-threaded Directory Discovery: Uses Go's concurrency model (goroutines) to send HTTP requests to multiple directories concurrently.
- HTTP Method Tampering: Tests common HTTP methods (GET, POST, PUT, DELETE, OPTIONS, HEAD) for each URL.
- Customizable Concurrency: Configurable limit on the number of concurrent requests.
- Detailed Output: Displays status code, headers, and the HTTP method used for each request.
- Input File Support: Accepts a file containing a list of directory paths to test.
- Go: The program requires Go version 1.16 or above.
- Linux/macOS/Windows: The program is designed to work on all major platforms.
- Clone the repository:
git clone https://github.com/0xAminED/Cheetah.git cd Cheetah- Build the program:
go build -o Cheetah-
Prepare an input file: The input file should contain one directory path per line (e.g.,
admin,login,uploads). -
Run the program:
./Cheetah -u https://example.com -i dirs.txt-u: Target URL (e.g.,https://example.com)-i: Path to the input file containing the list of directories to test.
./Cheetah -u https://example.com -i dirs.txtWhere dirs.txt contains directory paths like:
admin login uploads imagesMethod: GET | URL: https://example.com/admin Status Code: 200 Headers: map[Content-Type:[text/html; charset=UTF-8] Date:[Mon, 27 Nov 2024 17:15:09 GMT]] Method: POST | URL: https://example.com/login Status Code: 405 Headers: map[Allow:[GET, HEAD, OPTIONS]] Method: OPTIONS | URL: https://example.com/images Status Code: 200 Headers: map[Allow:[GET, POST, DELETE, OPTIONS]] ... Directory discovery completed in 5.72 seconds- You can add any custom HTTP methods to the
methodsarray in the source code if needed. - Adjust the
maxConcurrencyvalue to control the number of simultaneous requests.
This project is licensed under the MIT License - see the LICENSE file for details.
- Thanks to the contributors for their valuable feedback and improvements.