csprecon

Reconnaissance tool based on Content Security Policy

Coded with 💙 by edoardottt

Share on Twitter!

Install • Get Started • Examples • Changelog • Contributing • License

ASCIICAST HERE

Install 📡

go install github.com/edoardottt/csprecon/cmd/csprecon@latest

Get Started 🎉

Usage of csprecon:
  -c int
    	Concurrency level (default 100)
  -d string
    	Filter results belonging to this domain
  -l string
    	File containing input domains
  -o string
    	File to write output results
  -s	Print only results
  -t int
    	Connection timeout in seconds (default 4)
  -u string
    	Input domain
  -v	Verbose output

Examples 💡

Grab all possible results from single domain

csprecon -u http://edoardottt.com

Grab all possible results from a list of domains (protocols needed!)

csprecon -l targets.txt

echo targets.txt | csprecon

Grab all possible results belonging to a specific target from a list of domains (protocols needed!)

echo targets.txt | csprecon -d google.com

Changelog 📌

Detailed changes for each release are documented in the release notes.

Contributing 🛠

Just open an issue / pull request.

Before opening a pull request, download golangci-lint and run

golangci-lint run

If there aren't errors, go ahead :)

License 📝

This repository is under MIT License.
edoardoottavianelli.it to contact me.