CmdID

CmdID / Commands

kiterunner-scan

A contextual web scanner for concurrently scanning API paths and web endpoints using kitebuilder wordlists. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

A contextual web scanner for concurrently scanning API paths and web endpoints using kitebuilder wordlists. The scan subcommand targets one or multiple hosts with structured API requests.

Scan a target with an Assetnote wordlist (e.g., first 5000 API routes)

kiterunner scan https://example.com --assetnote-wordlist apiroutes-210228:5000Identify

Scan a target with a kitebuilder wordlist

kiterunner scan https://example.com --kitebuilder-list path/to/wordlist.kiteIdentify

Scan multiple hosts from a file with a kitebuilder wordlist

kiterunner scan path/to/hosts.txt --kitebuilder-list path/to/wordlist.kiteIdentify

Scan with an Assetnote wordlist and JSON output

kiterunner scan https://example.com --assetnote-wordlist apiroutes-210228:5000 -o jsonIdentify

Scan with custom concurrency settings for performance

kiterunner scan https://example.com --kitebuilder-list path/to/wordlist.kite --max-connection-per-host 5 --max-parallel-hosts 100Identify

Scan with a wordlist as a normal wordlist, disabling depth scanning

kiterunner scan https://example.com --kitebuilder-list path/to/rafter.txt --preflight-depth 0Identify

Scan with custom headers and ignore specific content length responses

kiterunner scan https://example.com --kitebuilder-list path/to/wordlist.kite --header "Authorization: Bearer token" --ignore-length 100-105Identify

Perform a full kitebuilder scan without phase scanning

kiterunner scan https://example.com --kitebuilder-list path/to/wordlist.kite --kitebuilder-full-scanIdentify