Home

Awesome

Cansina

Build Status

Cansina is a Web Content Discovery Application.

It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response.

Cansina duty is to help you making requests and filtering and inspecting the responses to tell apart if it is an existing resource or just an annoying or disguised 404.

Feature requests and comments are welcome.

Cansina is included in BlackArch Linux, give it a try!

CansinaImage

Installation

pip install cansina

If you don't want to pollute your environment to try cansina just create a virtual env

Usage

Wiki is full of documentation and examples. But as a fast example:

cansina -u <site_url> -p <payload_file>

Help summary:

cansina -h

Features

Speed

Wanna make Cansina run faster? Grab my cup of coffee.

Cansina downloads page content for inspection by default (Yep, Cansina does not racing for speed). but you can disable GET requests and make them HEAD (no body page download). Also, do no print the fancy terminal interface (you will lost some hackish points).

Star History

Star History Chart

Integrated tree viewer

Cansina integrates a tree viewer (thanks to asciitree package) to output a project sqlite base stored results (http 200 status code by now).

cansina -V output/http_testphp.vulnweb.com.sqlite

ViewerImage

Important

This tool is intended to be used in a fair and legal context, meaning, for example, a penetration testing for which you have been provided previous authorization.

One of its legitimate uses might be the one described in the following article:

Dependencies

Windows

Untested in Windows. It should work with --no-progress

Wordlists

License information

License: GNU General Public License, version 3 or later; see LICENSE.txt included in this archive for details.