base on 🦚 A web-app pentesting suite written in rust . <p align="center"><img src="https://github.com/pwnwriter/kanha/blob/logos/shree.svg" width="250px" height="100px" > <h4 align="center"><strong><code>Kanha</code></strong> - A web-app pentesting suite written in rust 🦀</h4> </h6> <h6 align="center"> <a href="https://github.com/pwnwriter/kanha#-installation"><code>Installation</code></a> ⦾ <a href="https://github.com/pwnwriter/kanha#-Subcommands"><code>Subcommands</code></a> ⦾ <a href="https://github.com/pwnwriter/kanha#-contributing"><code>Contribute</code></a> </h6> <p align="center"> <a href="https://crates.io/crates/kanha/"><img src="https://img.shields.io/crates/v/kanha?style=flat&amp;labelColor=56534b&amp;color=c1c1b6&amp;logo=Rust&amp;logoColor=white" alt="Crate Release"></a> <a href="https://github.com/pwnwriter/kanha/issues"><img src="https://img.shields.io/github/issues/pwnwriter/kanha.svg?style=flat-square&label=Issues&color=d77982"></a> <a href="https://github.com/pwnwriter/pwnwriter/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-MIT-white.svg" alt="MIT LICENSE"></a> <a href="https://ko-fi.com/pwnwriter"><img src="https://img.shields.io/badge/support-pwnwriter%20-pink?logo=kofi&logoColor=white" alt="Ko-fi"></a> ![-----------------------------------------------------][line] <img src="https://github.com/pwnwriter/kanha/assets/90331517/7fbabb20-44bf-4d34-9602-fad6e0487b5e" alt="img" align="right" width="50%"></p> [**`Kanha`**](/) is a tool that can help you perform, a variety of attacks based on the target domain . With just `kanha` you can do, [***`Fuzzing`***][wiki-fuzzing], [***`Reverse dns lookup`***][wiki-dns-lookup], [***`common http response`***][wiki-http], [***`subdomain takeover detection`***][wiki-subdomain] and many [**`more`**][commands]. The project is inspird by [`mini.nvim`][mini], basically helping you to be productive with less numbers of *tools(plugins)* installed on your system and be unobtrusive and function as a standalone **`single binary`** out of the box. Built from the ground up with performance, ease of use, and portability in mind in your favourite programming lang [**`rust`**][rust] 💝 ## Philosophy - **KISS** - Keep things simple and stupid. - **Ease** - Write code that can be used elsewhere as well. - **Efficiency** - Optimize for performance without sacrificing readability. ## Installation <details> <summary><code>Binary </code></summary> &nbsp; - *Manual* : You can directly download the binary of your arch from [**releases**][releases] and run it. - *One liner* : Run this script, requires `jq`,`curl`, `tar` & `wget` ```bash wget -qO- "$(curl -qfsSL "https://api.github.com/repos/pwnwriter/kanha/releases/latest" | jq -r '.assets[].browser_download_url' | grep -Ei "$(uname -m).*$(uname -s).*musl" | grep -v "\.sha")" | tar -xzf - --strip-components=1 ./kanha -h ``` </details> > [!IMPORTANT] > *_For upstream updates, it's recommended to build `kanha` from source !_* <details open> <summary><code>Source </code></summary> &nbsp; ```bash git clone --depth=1 https://github.com/pwnwriter/kanha --branch=main cd kanha cargo build --release ``` </details> <details> <summary><code>Cargo </code></summary> - Using [crates.io][crate] ```bash cargo install kanha ``` - Using [binstall][binstall] ```bash cargo binstall kanha ``` > **Note** ⚠️ > This requires a working setup of rust/cargo & binstall. </details> <details> <summary><code>METIS Linux </code></summary> &nbsp; ```bash sudo/doas pacman -Syyy kanha ``` </details> <details> <summary><code>Arch user repository </code></summary> &nbsp; ```bash paru/yay -S kanha-git ``` </details> <details open> <summary><code> On Nix </code></summary> &nbsp; ```bash # Build from source and run nix run github:pwnwriter/kanha # without flakes: nix-env -iA nixpkgs.kanha # with flakes: nix profile install nixpkgs#kanha ``` </details> ## Subcommands - ➊ `Status` :- Just return the HTTP response code of URLs <details> <summary>Help</summary> &nbsp; ```bash $ kanha status -h Just return the HTTP response code of URLs Usage: kanha status [OPTIONS] Options: -f, --filename <FILENAME> A file containing multiple urls -t, --tasks <TASKS> Define the maximum concurrent tasks [default: 20] --stdin Reads input from the standard in --exclude <EXCLUDE> Define your status code for selective exclusion -h, --help Print help -V, --version Print version ``` </details> - ➋ `fuzz` :- Fuzz URLs and return the response codes <details> <summary>Help</summary> &nbsp; ```bash $ kanha fuzz -h Fuzz a URL and return the response codes Usage: kanha fuzz [OPTIONS] --payloads <PAYLOADS> Options: -p, --payloads <PAYLOADS> A file containing a list of payloads -u, --url <URL> A single url -f, --file-path <FILE_PATH> Path of the file containing multiple urls -t, --tasks <TASKS> Define the maximum concurrent tasks [default: 20] --exclude <EXCLUDE> Define your status code for selective exclusion --stdin Reads input from the standard in -h, --help Print help -V, --version Print version ``` </details> - ➌ `rdns` :- Reverse dns lookup <details> <summary>Help</summary> &nbsp; ```bash $ kanha rdns -h Reverse dns lookup Usage: kanha rdns [OPTIONS] --filename <FILENAME> Options: -f, --filename <FILENAME> a file containing a list of possible wordlists --stdin Reads input from the standard in -h, --help Print help -V, --version Print version ``` </details> - ➍ `Takeover` :- Check possible subdomain takeover <details> <summary>Help</summary> &nbsp; ```bash $ kanha takeover -h Check possible subdomain takeover vulnerability Usage: kanha takeover [OPTIONS] Options: -u, --url <URL> A single url -f, --file-path <FILE_PATH> Path of the file containing multiple urls -j, --json-file <JSON_FILE> A json file containing signature values of different services --stdin Reads input from the standard in -h, --help Print help -V, --version Print version ``` </details> - ➎ `urldencode` :- (De|En) code urls <details> <summary> Help</summary> &nbsp; ```bash $ kanha urldencode -h (De|En) code urls Usage: kanha urldencode [OPTIONS] Options: --encode <ENCODE> Provide a url to encode --decode <DECODE> Provide a url to dencode -h, --help Print help -V, --version Print version ``` </details> <!-- ➏ ➐ ➑ ➒ --> ## Contributing - Recommend a new feature - Give the project a star - Add new [subcommand][commands]. - Fix docx and improve code quality ## Also see - [`haylxon`][haylxon] :- Blazingly fast tool to grab screenshots of your domain list right from terminal written in rust 🦀 - [`httpx`][httpx] :- httpx is a fast and multi-purpose HTTP toolkit. - [`ffuf`][ffuf] :- Fast web fuzzer written in Go ## FAQ - **Development:** - Progress may be gradual, but I assure you of delivering quality code! - **Why this?** - This is a way for me to continually expand my knowledge in cybersecurity and Rust! - **I want my quote in Kanha.** - Please feel free to add it [here][splash]. ## Support I am a student, i like working for open-source during my free time. If you appreciate my work, kindly consider supporting me through [Ko-fi][Ko-Fi]. ## Copying `Kanha` is licensed under the [**`MIT LICENSE`**][license], Feel free to consider Kanha as your own! <!-- Links --> [license]:/LICENSE [splash]:/src/interface/splashes.rs [commands]:/src/commands [releases]:https://github.com/pwnwriter/kanha/releases [line]:https://github.com/pwnwriter/haylxon/blob/readme-assets/colored.png [Ko-Fi]:https://ko-fi.com/pwnwriter [haylxon]:https://github.com/pwnwriter/haylxon [ffuf]:https://github.com/ffuf/ffuf [httpx]:https://github.com/projectdiscovery/httpx [crate]:https://crates.io/crates/kanha [binstall]:https://github.com/cargo-bins/cargo-binstall [mini]:https://github.com/echasnovski/mini.nvim [rust]:https://www.rust-lang.org [wiki-fuzzing]:https://en.wikipedia.org/wiki/Fuzzing [wiki-dns-lookup]:https://en.wikipedia.org/wiki/Reverse_DNS_lookup [wiki-http]:https://en.wikipedia.org/wiki/List_of_HTTP_status_codes [wiki-subdomain]:https://en.wikipedia.org/wiki/Domain_hijacking <p align="center"><img src="https://raw.githubusercontent.com/catppuccin/catppuccin/main/assets/footers/gray0_ctp_on_line.svg?sanitize=true" /></p> <p align="center">Copyright &copy; 2023 - present <a href="https://pwnwriter.xyz" target="_blank"> pwnwriter xyz </a> ☘️ </p> ", Assign "at most 3 tags" to the expected json: {"id":"938","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"