Skip to content

Wordlist processing

David García edited this page Sep 24, 2023 · 3 revisions

Recursion (--recursive)

$ cansina -u <target> -p <wordlist> --recursive

Cansina will made multiple recursive requests on each path components:

hxxp://target/path1/path2/path3/

hxxp://target/path1/path2/

hxxp://target/path1/

hxxp://target/

Add a specific extension (-e)

Some wordlists does not have a particular extension, so you can instruct Cansina to append an extension or a list of extensions if you wish.

$ cansina -u <target> -p <wordlist> -e php

$ cansina -u <target> -p <wordlist> -e asp,aspx,axd

Remove extension (--strip-extension)

The reverse condition of adding an extension. Removes the extension from words to try.

$ cansina -u <target> -p <wordlist> --strip-extension

Only alphanumeric words (--alpha)

Will only make requests on alphanumeric words, rest is discarded.

$ cansina -u <target> -p <wordlist> --ascii

Prefixing, infix or postfix content ('***')

This is useful when a URL pattern is observable. Cansina will substitute the '***' with the provided wordlist. Some sites employ a static scheme, for example: admin_loging.php, admin_panel.php, admin_list.php...

$ cansina -u <target/admin_***> -p <wordlist>

Uppercase all requests (-U)

Just make every wordlist UPPERCASE.

$ cansina -u <target> -p <wordlist> -U

Capitalize all requests (--capitalize)

Just make every word Capitalized.

$ cansina -u <target> -p <wordlist> --capitalize

Parse robots.txt (-R)

Cansina will parse the robots.txt file an use it as a wordlist if it exists

$ cansina -u <target> -p <wordlist> -R

Content inspection (-c)

Cansina will report to screen if the content is detected in response.

$ cansina -u <target> -p <wordlist> -c <look_for_this_text>