Monday, August 24, 2020

Wonitor - Fast, Zero Config Web Endpoint Change Monitor


fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed.
  • to increase network throughput, a --worker flag allows to set the concurrency when monitoring.
  • endpoints returning a javascript content type will be beautified by default.
  • using --headersOnly when adding a URL allows to only monitor response headers.

installation
Install via go or binary release:
go get -u github.com/rverton/wonitor

usage
λ $ ./wonitor
NAME:
   wonitor - web monitor

USAGE:
   wonitor [global options] command [command options] [arguments...]

COMMANDS:
   add, a      add endpoint to monitor
   delete, d   deletes an endpoint
   get, g      get endpoint body
   list, l     list all monitored endpoints and their body size in bytes
   monitor, m  retrieve all urls and compare them
   help, h     Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --help, -h  show help (default: false)

λ $ ./wonitor add --url https://unlink.io/
+ https://unlink.io/
λ $ ./wonitor monitor --save
[https://unlink.io/] 1576b diff:
--- Original
+++ Current
@@ -1 +1,47 @@
+HTTP/1.1 200 OK
+Content-Type: text/html
+Server: nginx/1.10.3 (Ubuntu)
+X-Frame-Options: DENY

+<h   tml>
+<body>
+<pre>
[... snip ...]
+</pre>
+</body>
+</html>
+

λ $ ./wonitor monitor --save
λ $ # no output because no change detected

endpoint diffing
The following headers are also included in the saved response and monitored for changes:
var headerToInclude = []string{
 "Host",
 "Content-Length",
 "Content-Type",
 "Location",
 "Access-Control-Allow-Origin",
 "Access-Control-Allow-Methods",
 "Access-Control-Expose-Headers",
 "Access-Control-Allow-Credentials",
 "Allow",
 "Content-Security-Policy",
 "Proxy-Authenticate",
 "Server",
 "WWW-Authenticate",
 "X-Frame-Options",
 "X-Powered-By",
}




via KitPloit
This article is the property of Tenochtitlan Offensive Security. Verlo Completo --> https://tenochtitlan-sec.blogspot.com

Related articles


Posted by at

No comments:

Post a Comment

Have something to say about one of the videos or blogs, well here is a chance to do that now!!! Yes, you can do it, you know you can!!!!!

Subscribe to: Post Comments (Atom)