EagleWebScanner is a lightweight multithreaded web directory and endpoint discovery tool written in Python. It helps security researchers, bug bounty hunters, and penetration testers identify accessible paths, redirects, login portals, admin panels, and hidden resources on web applications.
- Multithreaded directory scanning
- Custom wordlist support
- Custom HTTP headers
- Configurable thread count
- Configurable request timeout
- JSONL report generation
- JSON conversion
- SQLite database export
- Redirect detection
- Content-Length reporting
- Error and timeout handling
Clone the repository:
git clone https://github.com/EagleComrade/EagleWebScanner.git
cd EagleWebScannerInstall dependencies:
pip install requestsBasic scan:
python scan.py -u https://example.comCustom wordlist:
python scan.py -u https://example.com -d wordlist/custom.txtCustom thread count:
python scan.py -u https://example.com -T 100Custom timeout:
python scan.py -u https://example.com -t 10Custom headers:
python scan.py -u https://example.com -H headers.txtConvert JSONL to JSON:
python scan.py -u https://example.com -c jsonConvert JSONL to SQLite database:
python scan.py -u https://example.com -c dbExample:
User-Agent: Mozilla/5.0
Authorization: Bearer TOKEN
Cookie: sessionid=123456
Each scan generates a JSONL report containing:
- HTTP Status Code
- Status Message
- Requested URL
- Final URL
- Server Header
- Content Type
- Content Length
- Redirect Location
- Error Status
Example:
{
"status_code": 302,
"status_message": "Found",
"requested_url": "https://example.com/admin",
"final_url": "https://example.com/admin",
"server": "nginx",
"content_type": "text/html",
"content_length": 0,
"redirect_location": "/login",
"error": false
}This tool is intended for authorized security testing, research, and educational purposes only. Always obtain proper authorization before scanning any system or network. The author is not responsible for misuse of this software.
EagleComrade
MIT License