Drone

A very basic attack vector scanner for web based applications.

It will not do any injection, only scraping and parsing.

Dependencies

• BeautifulSoup 4 (bs4)

Features

• use robots.txt
• HTTP proxy support
• skips urls with same base and params (see tests)
• skips image files
• collects forms (skips forms with same action AND same inputs)
• threaded
• does not perform any injection

Detection (possible injection)

• urls with parameters
• forms

To Do

• more detection
• dorking

Usage

python drone.py [-h] [--proxy PROXY] [--proxy_port PROXY_PORT] [--robots] base_url