man/ronin-vulns-scan.1 in ronin-vulns-0.1.5 vs man/ronin-vulns-scan.1 in ronin-vulns-0.2.0.rc1

- old
+ new

@@ -1,138 +1,137 @@ -.\" Generated by kramdown-man 0.1.9 +.\" Generated by kramdown-man 1.0.1 .\" https://github.com/postmodern/kramdown-man#readme .TH ronin-vulns-scan 1 "May 2022" Ronin "User Manuals" -.LP +.SH NAME +.PP +ronin\-vulns\-scan \- Scans URL(s) for web vulnerabilities .SH SYNOPSIS -.LP .PP -\fBronin-vulns scan\fR \[lB]\fIoptions\fP\[rB] \[lC]\fIURL\fP \.\.\. \[or] \fB--input\fR \fIFILE\fP\[rC] -.LP +\fBronin\-vulns scan\fR \[lB]\fIoptions\fP\[rB] \[lC]\fIURL\fP \.\.\. \[or] \fB\-\-input\fR \fIFILE\fP\[rC] .SH DESCRIPTION -.LP .PP Scans URL(s) for web vulnerabilities\. The URLs to scan can be given as -additional arguments or read from a file using the \fB--input\fR option\. -.LP +additional arguments or read from a file using the \fB\-\-input\fR option\. .SH ARGUMENTS -.LP .TP \fIURL\fP A URL to scan\. -.LP .SH OPTIONS -.LP .TP -\fB--first\fR +\fB\-\-db\fR \fINAME\fP +The database name to connect to\. Defaults to \fBdefault\fR if not given\. +.TP +\fB\-\-db\-uri\fR \fIURI\fP +The database URI to connect to +(ex: \fBpostgres:\[sl]\[sl]user:password\[at]host\[sl]db\fR)\. +.TP +\fB\-\-db\-file\fR \fIPATH\fP +The sqlite3 database file to use\. +.TP +\fB\-\-import\fR +Imports discovered vulnerabilities into the database\. +.TP +\fB\-\-first\fR Only find the first vulnerability for each URL\. -.LP .TP -\fB-A\fR, \fB--all\fR +\fB\-A\fR, \fB\-\-all\fR Find all vulnerabilities for each URL\. -.LP .TP -\fB-H\fR, \fB--header\fR \[lq]\fIName\fP: \fIvalue\fP\[rq] +\fB\-\-print\-curl\fR +Also prints an example \fBcurl\fR command for each vulnerability\. +.TP +\fB\-\-print\-http\fR +Also prints an example HTTP request for each vulnerability\. +.TP +\fB\-M\fR, \fB\-\-request\-method\fR \fBCOPY\fR\[or]\fBDELETE\fR\[or]\fBGET\fR\[or]\fBHEAD\fR\[or]\fBLOCK\fR\[or]\fBMKCOL\fR\[or]\fBMOVE\fR\[or]\fBOPTIONS\fR\[or]\fBPATCH\fR\[or]\fBPOST\fR\[or]\fBPROPFIND\fR\[or]\fBPROPPATCH\fR\[or]\fBPUT\fR\[or]\fBTRACE\fR\[or]\fBUNLOCK\fR +Sets the HTTP request method to use\. +.TP +\fB\-H\fR, \fB\-\-header\fR \[lq]\fIName\fP: \fIvalue\fP\[rq] Sets an additional header using the given \fIName\fP and \fIvalue\fP\. -.LP .TP -\fB-C\fR, \fB--cookie\fR \fICOOKIE\fP +\fB\-U\fR, \fB\-\-user\-agent\-string\fR \fISTRING\fP +Sets the \fBUser\-Agent\fR header string\. +.TP +\fB\-u\fR, \fB\-\-user\-agent\fR \fBchrome\-linux\fR\[or]\fBchrome\-macos\fR\[or]\fBchrome\-windows\fR\[or]\fBchrome\-iphone\fR\[or]\fBchrome\-ipad\fR\[or]\fBchrome\-android\fR\[or]\fBfirefox\-linux\fR\[or]\fBfirefox\-macos\fR\[or]\fBfirefox\-windows\fR\[or]\fBfirefox\-iphone\fR\[or]\fBfirefox\-ipad\fR\[or]\fBfirefox\-android\fR\[or]\fBsafari\-macos\fR\[or]\fBsafari\-iphone\fR\[or]\fBsafari\-ipad\fR\[or]\fBedge\fR +Sets the \fBUser\-Agent\fR header\. +.TP +\fB\-C\fR, \fB\-\-cookie\fR \fICOOKIE\fP Sets the raw \fBCookie\fR header\. -.LP .TP -\fB-c\fR, \fB--cookie-param\fR \fINAME\fP\fB=\fR\fIVALUE\fP +\fB\-c\fR, \fB\-\-cookie\-param\fR \fINAME\fP\fB\[eq]\fR\fIVALUE\fP Sets an additional \fBCookie\fR param using the given \fINAME\fP and \fIVALUE\fP\. -.LP .TP -\fB-R\fR, \fB--referer\fR \fIURL\fP +\fB\-R\fR, \fB\-\-referer\fR \fIURL\fP Sets the \fBReferer\fR header\. -.LP .TP -\fB-F\fR, \fB--form-param\fR \fINAME\fP\fB=\fR\fIVALUE\fP +\fB\-F\fR, \fB\-\-form\-param\fR \fINAME\fP\fB\[eq]\fR\fIVALUE\fP Sets an additional form param using the given \fINAME\fP and \fIVALUE\fP\. -.LP .TP -\fB--test-query-param\fR \fINAME\fP +\fB\-\-test\-query\-param\fR \fINAME\fP Tests the URL query param name\. -.LP .TP -\fB--test-all-query-params\fR +\fB\-\-test\-all\-query\-params\fR Test all URL query param names\. -.LP .TP -\fB--test-header-name\fR \fINAME\fP +\fB\-\-test\-header\-name\fR \fINAME\fP Tests the HTTP Header name\. -.LP .TP -\fB--test-cookie-param\fR \fINAME\fP +\fB\-\-test\-cookie\-param\fR \fINAME\fP Tests the HTTP Cookie name\. -.LP .TP -\fB--test-all-cookie-params\fR +\fB\-\-test\-all\-cookie\-params\fR Test all Cookie param names\. -.LP .TP -\fB--test-form-param\fR \fINAME\fP +\fB\-\-test\-form\-param\fR \fINAME\fP Tests the form param name\. -.LP .TP -\fB-i\fR, \fB--input\fR \fIFILE\fP +\fB\-i\fR, \fB\-\-input\fR \fIFILE\fP Reads URLs from the given \fIFILE\fP\. -.LP .TP -\fB--lfi-os\fR \fBunix\fR\[or]\fBwindows\fR +\fB\-\-lfi\-os\fR \fBunix\fR\[or]\fBwindows\fR Sets the OS to test for\. -.LP .TP -\fB--lfi-depth\fR \fINUM\fP +\fB\-\-lfi\-depth\fR \fINUM\fP Sets the directory depth to escape up\. -.LP .TP -\fB--lfi-filter-bypass\fR \fBnull_byte\fR\[or]\fBdouble_escape\fR\[or]\fBbase64\fR\[or]\fBrot13\fR\[or]\fBzlib\fR +\fB\-\-lfi\-filter\-bypass\fR \fBnull\-byte\fR\[or]\fBdouble\-escape\fR\[or]\fBbase64\fR\[or]\fBrot13\fR\[or]\fBzlib\fR Sets the filter bypass strategy to use\. -.LP .TP -\fB--rfi-filter-bypass\fR \fBdouble-encode\fR\[or]\fBsuffix-escape\fR\[or]\fBnull-byte\fR +\fB\-\-rfi\-filter\-bypass\fR \fBdouble\-encode\fR\[or]\fBsuffix\-escape\fR\[or]\fBnull\-byte\fR Optional filter\-bypass strategy to use\. -.LP .TP -\fB--rfi-script-lang\fR \fBasp\fR\[or]\fBasp.net\fR\[or]\fBcoldfusion\fR\[or]\fBjsp\fR\[or]\fBphp\fR\[or]\fBperl\fR +\fB\-\-rfi\-script\-lang\fR \fBasp\fR\[or]\fBasp\.net\fR\[or]\fBcoldfusion\fR\[or]\fBjsp\fR\[or]\fBphp\fR\[or]\fBperl\fR Explicitly specify the scripting language to test for\. -.LP .TP -\fB--rfi-test-script-url\fR \fIURL\fP +\fB\-\-rfi\-test\-script\-url\fR \fIURL\fP Use an alternative test script URL\. -.LP .TP -\fB--sqli-escape-quote\fR +\fB\-\-sqli\-escape\-quote\fR Escapes quotation marks\. -.LP .TP -\fB--sqli-escape-parens\fR +\fB\-\-sqli\-escape\-parens\fR Escapes parenthesis\. -.LP .TP -\fB--sqli-terminate\fR -Terminates the SQL expression with a \fB--\fR\. -.LP -.PP -\fB--ssti-test-expr\fR \[lC]\fIX\fP*\fIY\fP \[or] \fIX\fP\[sl]\fIZ\fP \[or] \fIX\fP\[pl]\fIY\fP \[or] \fIX\fP\-\fIY\fP\[rC] +\fB\-\-sqli\-terminate\fR +Terminates the SQL expression with a \fB\-\-\fR\. +.TP +\fB\-\-ssti\-test\-expr\fR \[lC]\fIX\fP*\fIY\fP \[or] \fIX\fP\[sl]\fIZ\fP \[or] \fIX\fP\[pl]\fIY\fP \[or] \fIX\fP\-\fIY\fP\[rC] Optional numeric test to use\. -.LP .TP -\fB--open-redirect-url\fR \fIURL\fP +\fB\-\-open\-redirect\-url\fR \fIURL\fP Optional test URL to try to redirect to\. -.LP .TP -\fB-h\fR, \fB--help\fR +\fB\-h\fR, \fB\-\-help\fR Print help information\. -.LP .SH AUTHOR -.LP .PP Postmodern .MT postmodern\.mod3\[at]gmail\.com .ME -.LP .SH SEE ALSO -.LP .PP -ronin\-vulns\-lfi(1) ronin\-vulns\-rfi(1) ronin\-vulns\-sqli(1) ronin\-vulns\-ssti(1) ronin\-vulns\-open\-redirect(1) ronin\-vulns\-reflected\-xss(1) \ No newline at end of file +.BR ronin\-vulns\-lfi (1) +.BR ronin\-vulns\-rfi (1) +.BR ronin\-vulns\-sqli (1) +.BR ronin\-vulns\-ssti (1) +.BR ronin\-vulns\-open\-redirect (1) +.BR ronin\-vulns\-reflected\-xss (1)