A fast tool written in Golang used to check for sensitive/juicy information within web pages content. There's a very good ready regexes (regex.json) file and most of them has been collected by me from different repositories (big shout-out to the people who created/posted them). The regex.json list will be updated whenever I find/community shares interesting regexes.
Using Go (Go compiler should be installed & configured!):
$ go install github.com/viper0x/gomugger@latest && wget https://raw.githubusercontent.com/viper0x/gomugger/main/regex.json
If the above didn't work:
$ go get -u github.com/viper0x/gomugger && wget https://raw.githubusercontent.com/viper0x/gomugger/main/regex.json
Or by manual building:
$ git clone https://github.com/viper0x/gomugger
$ cd gomugger
$ go build .
$ cat targets.txt | ./gomugger
NOTE: make sure you are running the tool in the same directory where regex.json
exist. Or you can use -rL <path>
instead.
$ gomugger -h
______ __ ___
/ ____/___ / |/ /_ ______ _____ ____ _____
/ / __/ __ \/ /|_/ / / / / __ \/ __ \/ _ \/ ___/
/ /_/ / /_/ / / / / /_/ / /_/ / /_/ / __/ /
\____/\____/_/ /_/\__,_/\__, /\__, /\___/_/
/____//____/
https://github.com/viper0x
Usage:
[stdin] | gomugger [options]
Options:
-c, --concurrency <val> The concurrency level (default 25)
-s, --silent Show results only without printing banner
-r, --regex <regex> Use custom regex instead of using regex.json list
-rL, --regex-list <file> Use another json regex list instead of regex.json (default regex.json)
-a, --all Will check for all regexes including regexes named (Credentials Disclosure)
-h, --help Display help
Examples:
cat targets.txt | gomugger
echo https://example.com | gomugger
echo https://example.com | waybackurls | gomugger
cat targets.txt | gomugger -r <REGEX>
cat targets.txt | gomugger -rL <FILE.json>
You can set the concurrency level with the -c
flag:
$ cat targets.txt | gomugger -c 50
Create .json
file and add regexes using the following format. Then you can use -rL
followed by the json file name to use the custom created list:
{
"regexes": [
{
"name": "<REGEX NAME>",
"regex": "<REGEX>"
},
{
"name": "<REGEX NAME>",
"regex": "<REGEX>"
}
]
}
cat targets.txt | gomugger -rL <FILE.json>
You have to edit the regex.json
file and add your regex using the following format:
{
"name": "<NEW REGEX NAME>",
"regex": "<REGEX>"
}
$ cat targets.txt | gomugger -r "REGEX"