Detective
Detective helps you find information (at your favorite bug bounty program) that you are not supposed to see. It primarily focuses on information disclosure and sensitive data exposure vulnerabilities.
Table of contents
Installation
First make sure you’re on Python 2.7/3.3 or higher. Then run the command below to install Detective.
$ pip install --upgrade detective
Usage
Help
usage: detective [-h] -d DOMAIN [-pmm] [-cos] [-coh] [-cot] [-siv] [-md MAX_DEPTH] [-mt MAX_THREADS]
required arguments:
-d DOMAIN, --domain DOMAIN the domain to crawl (e.g. https://finnwea.com)
optional arguments:
-h, --help show this help message and exit
-pmm, --protocol-must-match only crawl pages with the same protocol as the startpoint (e.g. only https)
-cos, --crawl-other-subdomains also crawl pages that have another subdomain than the startpoint
-coh, --crawl-other-hostnames also crawl pages that have another hostname than the startpoint
-cot, --crawl-other-tlds also crawl pages that have another tld than the startpoint
-siv, --stop-if-vulnerable stop crawling if a vulnerability was found
-md MAX_DEPTH, --max-depth MAX_DEPTH the maximum search depth (default is unlimited)
-mt MAX_THREADS, --max-threads MAX_THREADS the maximum amount of simultaneous threads to use (default is 8)Example
detective -d https://finnwea.com -siv
Issues
Issues or new features can be reported via the GitHub issue tracker. Please make sure your issue or feature has not yet been reported by anyone else before submitting a new one.
License
Detective is open-sourced software licensed under the MIT license.
1 maintainer
Metadata
1 maintainer
Release files for detective 1.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| detective-1.0.2.tar.gz | 12.3 kB | Without provenance | Details for detective-1.0.2.tar.gz |
Release files / detective-1.0.2.tar.gz
| Download URL | detective-1.0.2.tar.gz |
|---|---|
| Size | 12.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c17fca460df0f667a404b35fd36ebea8a9981bd7c73a300017f239b697bdb8ee
|
|
BLAKE2b-256 checksum How to use checksums |
c9e6cfd358cd064b95bcd2b61f26d564cc6158c38923bf7898379d0ac7bfeef4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.12.1 pkginfo/1.5.0.1 requests/2.21.0 setuptools/40.6.3 requests-toolbelt/0.9.1 tqdm/4.30.0 CPython/3.7.2
|
Security for detective 1.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
