grahamzemel / webheckscanner

A hacking tool for bug bounties. Sharing and modifying is encouraged!

WebHeckScanner (v2.0)

Written by Graham Zemel, using Nikto, Nuclei, Sqlmap, Anew, Gau, and more!

This is a Bash script designed to scan web apps for vulnerabilities using advanced tools while maintaining efficiency

Installation

You must install and configure your directory as I have done or change the code if you have tools in your path already

git clone https://github.com/grahamzemel/WebHeckScanner

cd WebHeckScanner

Make sure all tools are installed before continuing

chmod +x webHeck.sh

sudo ./webHeck.sh -n 'folder name to store results in' -u 'any url(keep the apostrophes)'

Note: Upon running this command with the same -n value, or name, it will delete the previous test.

If there are any permission errors running the tool files, run chmod +x ${toolfile} or sudo chmod +x ${toolfile}.
If there are any errors with the file system or installing, make sure the directory tree matches the one below.

Tools Utilized:

Larger tools stored in their own folders:

Sqlmap, a tool for testing SQL injection vulnerabilities which are some of the most dangerous.
Nikto, a tool for scanning websites written in perl, easy to use, one of my favorites.
Nuclei is likely the most customizable tool out there for web pentesting, there's about a million different templates to scan with on Github.

Solo files, small tools that are contained in 'req_solos/':

Anew: File I/O modification through terminal.
Gauplus: 'Get All Urls Plus', outdated but still has useful properties.
Gau: 'Get All Urls', similar to Subdomainer but I like this tool better.
Httpx: Runs a bunch of probes for vulnerabilities, commonly used in combination with most of these tools.
PV: 'Pipe Viewer', used by some of these tools to print the status of a current scan/process.
WayBackUrls: Neat tool that integrates the waybackmachine as a means of fetching old and possibly useful files that may contain credentials or source code.

Directory Tree Graph

WebHeckScanner
-README.md
-webHeck.sh
-nikto/
-nuclei/
--nuclei
-sqlmap/
-req_solos/
--anew
--gau
--gauplus
--httpx
--pv
--waybackurls

webheckscanner's Issues

problem to install pv tool

I can not run sudo sh ./configure.in

sudo sh ./configure.in
./configure.in: 1: dnl: not found
./configure.in: 3: Syntax error: word unexpected (expecting ")")

multiple errors using the tool

--COLLECTING SUBDOMAINS ~30s----
./webHeck.sh: línea 39: req_solos/gau: no se puede ejecutar fichero binario: Formato de ejecutable incorrecto
./webHeck.sh: línea 41: kill: (38761) - No existe el proceso
No subdomains found!
----RUNNING NUCLEI ~1m-10m----
./webHeck.sh: línea 65: nuclei/nuclei: No existe el archivo o el directorio
----NO VULNERABILITIES FOUND----
----RUNNING SQLMAP ~instant-10m----
Running heuristic test (POSITIVE if 'Completed' not displayed within 5 seconds)
Completed heuristic test
----FILTERING FILETYPES ~instant----
./webHeck.sh: línea 75: req_solos/httpx: no se puede ejecutar fichero binario: Formato de ejecutable incorrecto

Not working

Hey !!!

I tried multiple way to run the script but always come up with below error so could you please tell me how to fix it.

Creating directories and running Nikto...
./webHeck.sh: line 19: nikto/program/nikto.pl: No such file or directory
Running gau to collect subdomains...
./webHeck.sh: line 23: req_solos/gau: No such file or directory
Total targets: 0...
./webHeck.sh: line 25: req_solos/anew: No such file or directory
./webHeck.sh: line 25: req_solos/gauplus: No such file or directory
cat: subsToFilter.txt: No such file or directory
Running Nuclei...
./webHeck.sh: line 34: nuclei/nuclei: No such file or directory
Running sqlmap...
./webHeck.sh: line 30: sqlmap/sqlmap.py: No such file or directory
Filtering targets...
./webHeck.sh: line 43: req_solos/httpx: No such file or directory

Apart from this I installed all this tools. but still i don't know what is the issue here!