Monsoon – Fast HTTP Enumerator

A fast HTTP enumerator that enables you to execute a significant quantity of HTTP requests, filter the responses and exhibit them in true-time.

Example
Run an HTTP GET ask for for every entry in filenames.txt, disguise all responses with the position code 403 or 404:

Installation

Making from source
These guidelines will get you a compiled version of the code in the learn branch.
You’ll have to have a the latest variation of the Go compiler, at least model 1.11. For Debian, put in the offer golang-go.
Clone the repository, then from within the checkout run the pursuing command:

$ go build

Later on you will discover a monsoon binary in the current listing. It can be for other running methods as follows:

$ GOOS=home windows GOARCH=amd64 go create -o monsoon.exe

Unofficial Packages
For Arch Linux based mostly distributions monsoon is accessible as an unofficial deal on the AUR. Utilizing your AUR helper of option such as yay:

yay -S monsoon

Obtaining Enable
The system has many subcommands, the most critical one particular is fuzz which incorporates the key performance. You can display a listing of instructions as follows:

$ ./monsoon -h
Utilization:
  monsoon command [options]

Offered Instructions:
  fuzz        Execute and filter HTTP requests
  aid        Assistance about any command
  present        Assemble and exhibit an HTTP ask for
  exam        Send out an HTTP ask for to a server and demonstrate the result
  version     Display screen model information

Choices:
  -h, --support   assist for monsoon

Use "monsoon [command] --assistance" for much more facts about a command.

For every single command, contacting it with --help (e.g. monsoon fuzz --enable) will exhibit a description of all the solutions, and calling monsoon support fuzz also exhibits an considerable checklist of illustrations.

Wordlists
The SecLists Task collects wordlists that can be used with monsoon.

Resource connection

Go through A lot more on Pentesting Equipment