Kanha - A web-app pentesting suite written in rust ðĶ
[**`Kanha`**](/) is a tool that can help you perform, a variety of attacks based on the target domain . With just `kanha` you can do, [***`Fuzzing`***](https://en.wikipedia.org/wiki/Fuzzing), [***`Reverse dns lookup`***](https://en.wikipedia.org/wiki/Reverse_DNS_lookup),
[***`common http response`***](https://en.wikipedia.org/wiki/List_of_HTTP_status_codes), [***`subdomain takeover detection`***](https://en.wikipedia.org/wiki/Domain_hijacking) and many [**`more`**](/src/commands).
The project is inspird by [`mini.nvim`](https://github.com/echasnovski/mini.nvim), basically helping you to be productive with less numbers of *tools(plugins)* installed on your system and be unobtrusive and function as a standalone **`single binary`** out of the box.
Built from the ground up with performance, ease of use, and portability in mind in your favourite programming lang [**`rust`**](https://www.rust-lang.org/) ð
## ð§ Philosophy
- **KISS** - Keep things simple and stupid.
- **Ease** - Write code that can be used elsewhere as well.
- **Efficiency** - Optimize for performance without sacrificing readability.
## ðą Installation
ðŠ Binary
- You can directly download the [**binary**](https://github.com/pwnwriter/kanha/releases) of your arch and run it.
ðž Source
```bash
git clone --depth=1 https://github.com/pwnwriter/kanha --branch=main
cd kanha
cargo build --release
```
Then go to `release` dir and `./kanha` or move the `binary` to your any `$PATH` for instant access from anywhere.
ð Cargo
- Using [crates.io](https://crates.io/crates/kanha)
```bash
cargo install kanha
```
- Using [binstall](https://github.com/cargo-bins/cargo-binstall)
```bash
cargo binstall kanha
```
> **Note** â ïļ
> This requires a working setup of rust/cargo & binstall.
ðĐ METIS Linux
```bash
sudo/doas pacman -Syyy kanha
```
## ð Subcommands
- â `Status` :- Just return the HTTP response code of URLs
ðŧ Help
```bash
$ kanha status -h
Just return the HTTP response code of URLs
Usage: kanha status [OPTIONS]
Options:
-f, --filename A file containing multiple urls
-t, --tasks Define the maximum concurrent tasks [default: 20]
--stdin Reads input from the standard in
--exclude Define your status code for selective exclusion
-h, --help Print help
-V, --version Print version
```
ðĶ Screenshots
- â `fuzz` :- Fuzz URLs and return the response codes
ðŧ Help
```bash
$ kanha fuzz -h
Fuzz a URL and return the response codes
Usage: kanha fuzz [OPTIONS] --payloads
Options:
-p, --payloads A file containing a list of payloads
-u, --url A single url
-f, --file-path Path of the file containing multiple urls
-t, --tasks Define the maximum concurrent tasks [default: 20]
--exclude Define your status code for selective exclusion
--stdin Reads input from the standard in
-h, --help Print help
-V, --version Print version
```
ðĶ Screenshots
- â `rdns` :- Reverse dns lookup
ðŧ Help
```bash
$ kanha rdns -h
Reverse dns lookup
Usage: kanha rdns [OPTIONS] --filename
Options:
-f, --filename a file containing a list of possible wordlists
--stdin Reads input from the standard in
-h, --help Print help
-V, --version Print version
```
ðĶ Screenshots
- â `Takeover` :- Check possible subdomain takeover
ðŧ Help
```bash
$ kanha takeover -h
Check possible subdomain takeover vulnerability
Usage: kanha takeover [OPTIONS]
Options:
-u, --url A single url
-f, --file-path Path of the file containing multiple urls
-j, --json-file A json file containing signature values of different services
--stdin Reads input from the standard in
-h, --help Print help
-V, --version Print version
```
ðĶ Screenshots
- â `urldencode` :- (De|En) code urls
ðŧ Help
```bash
$ kanha urldencode -h
(De|En) code urls
Usage: kanha urldencode [OPTIONS]
Options:
--encode Provide a url to encode
--decode Provide a url to dencode
-h, --help Print help
-V, --version Print version
```
ðĶ Screenshots
## ð Contributing
- ðŠķ Recommend a new features
- â Give the project a star
- ð Add new [subcommand](/src/commands).
- ð§âð Fix docx // improve code quality
## ð Also see
- [`haylxon`](https://github.com/pwnwriter/haylxon) :- Blazingly fast tool to grab screenshots of your domain list right from terminal written in rust ðĶ
- [`httpx`](https://github.com/projectdiscovery/httpx) :- httpx is a fast and multi-purpose HTTP toolkit.
- [`ffuf`](https://github.com/ffuf/ffuf) :- Fast web fuzzer written in Go
## ð License
As always, this project is also licensed under the [**`MIT LICENSE`**](/LICENSE)
Copyright © 2023 pwnwriter xyz âïļ