uwhere

README

UWhere

UWhere (URL Where) is a tool that follows url's given through the pipe and outputs the final url redirected.

Install

▶ go install github.com/chadmelancia/uwhere@main

Basic Usage

uwhere accepts line-delimited domains on stdin:

▶ cat recon/example/domains.txt
example.com
example.edu
example.net
▶ cat recon/example/domains.txt | uwhere
http://example.com
http://example.net
http://example.edu
https://example.com
https://example.edu
https://example.net

Concurrency

You can set the concurrency level with the -c flag:

▶ cat domains.txt | httprobe -c 50

Timeout

You can change the timeout by using the -t flag and specifying a timeout in milliseconds:

▶ cat domains.txt | httprobe -t 20000

Why does it exist?

I developed the tool to run on recon of a target, since after grabing multiple domains and subdomains, some of them redirect to the same url (e.g. "sub1.example.com" and "sub2.example.com" redirect to "example.com"). So, in order to eliminate them, that tool will follow the redirect and give you the final url. That gives you the oportunity to get a better result when running a content grabber like fff.

The code was mostly stolen heavily based on the tool httprobe from @tomnomnom, as the idea. After watching a video on his workflow for reconnaissance, I noticed that after using httprobe he also would use fff (another of his tools), which grabs the head and body of the page given, but if that page is going to redirect you to another directory (e.g. "api.example.com" redirects to "api.example.com/auth/login"), the content grabbed by fff may not be of any value. Also, that gives a quick way to see which url's send you to a login page or something else.

It is my first tool developed ever. I've never seen golang before and I did it in a few hours, so it works, but I bet there's something that can be improved. I'm open to feedbacks and sugestions.