Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add feature to get HTTP OPTIONS #44

Closed
wants to merge 2 commits into from
Closed

Conversation

brimstone
Copy link

This adds a -opt feature to reveal HTTP OPTIONS.
I needed to be able to find dav shares for a CTF.
I didn't find any other tool that would do this, so I modified gobuster.

@OJ
Copy link
Owner

OJ commented May 28, 2017

Thanks @brimstone. So is the intent here to just be able to discover the options available? Would it be worth adding filters here so that people can specify which options they're looking for in particular?

@OJ OJ self-assigned this May 28, 2017
@brimstone
Copy link
Author

Correct, the intent is to use the HTTP method OPTIONS to discover the HTTP methods available to each directory or file discovered. Now that I type this out, maybe the flag should be -methods? There's <20 different possible http methods possible, and in practice there's <5 that keep showing up. I don't know that it makes sense to filter only matching methods, but maybe filter out the common: HEAD, GET, POST, OPTIONS methods. Another route could be a more explicit -dav option that determines if webdav is supported based on the methods returned by HTTP OPTIONS. What do you think?

@OJ
Copy link
Owner

OJ commented Oct 30, 2017

Sorry for not getting back to you earlier. I think it'd be great to be able to pass in a CSV of methods. From there people can use custom ones as well (given that it's possible to have custom methods in various services). The -dav option sounds nice but I say let's keep it simple to start with.

@OJ OJ added the enhancement label Oct 30, 2017
@OJ
Copy link
Owner

OJ commented Jan 14, 2018

Hi @brimstone sorry for the tardiness. I've landed a chunky refactor to the code, so would it be possible for you to update this PR so it's rebased on master? Thank you!

@OJ OJ modified the milestones: Version 1.4, Version 1.5 Jan 14, 2018
@brimstone
Copy link
Author

I'm looking into this now.

@brimstone
Copy link
Author

brimstone commented Jan 14, 2018

All I've done is rework this to account for the refactor to 1.4. This is still simply showing the server methods supported for a URL and not filtering them with just what the user is requesting. I can add that if it's still desired, but it'll make the code longer.

@0xdevalias
Copy link
Contributor

Potentially related, may be relevant to consider with regards to this PR:

@OJ
Copy link
Owner

OJ commented Aug 27, 2018

Apologies for the delay on this, can I please request that you rebase your changes on 2.0.0 now that I've finally landed #79? Thank you so much.

@OJ OJ removed this from the Version 1.5 milestone Oct 1, 2019
@brimstone brimstone closed this Apr 17, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants