Cirrusgo is a fast tool to scan SAAS,PAAS App written in Go
SAAS App Support :
Note flag -o output not working
install : golang 1.18Ver
go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest
or
go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest
Help
cirrusgo –help
_ _
/ /() _ _ / /
/ / / // // // / / // // / / _ \
/ / / // / / / / // /(_ )/ // // // /
____///// // _,/// _/ ____/ v0.0.1
cirrusgo –help
-u, –url Define single URL to fuzz
-l, –list Show App List
-c, –check only check endpoint
-V, –version Show current version
-h, –help Display its help
[cirrusgo [app] [options] ..]
cirrusgo salesforce –help
-u, –url Define single URL
-c, –check only check endpoint
-lobj, –listobj pull the object list.
-gobj –getobj pull the object.
-obj –objects set the object name. Default value is “User” object.
Juicy Objects: Case,Account,User,Contact,Document,Cont
entDocument,ContentVersion,ContentBody,CaseComment,Not
e,Employee,Attachment,EmailMessage,CaseExternalDocumen
t,Attachment,Lead,Name,EmailTemplate,EmailMessageRelation
-gre –getrecord pull the Record id.
-re –recordid set the recode id to dump the record
-cw –chkWritable check all Writable objects
-f, –full dump all pages of objects.
–dump
-H, –header Pass custom header to target
-proxy, –proxy Use proxy to fuzz
-o, –output File to save results
[flags payload]
[command: cirrusgo salesforce –payload options]
-payload, –payload Generator payload for test manual Default “ObjectList”
GetItems -obj set object
-page set page
-pages set pageSize
GetRecord -re set recoder id
WritableOBJ -obj set object
SearchObj -obj set object
-page set page
-pages set pageSize
AuraContext -fwuid set UID
-App set AppName
-markup set markup
ObjectList no options
Dump no options
-h, –help Display its help
Example
cirrusgo salesforce -u https://loclhost -gobj
dump
cirrusgo salesforce -u https://localhost/ -f
check Writable Objects
cirusgo salesforce -u https://localhost/ -cw
The cp command, short for "copy," is the main Linux utility for duplicating files and directories. Whether…
Introduction In digital investigations, images often hold more information than meets the eye. With the…
The cat command short for concatenate, It is a fast and versatile tool for viewing and merging…
What is a Port? A port in networking acts like a gateway that directs data…
The ls command is fundamental for anyone working with Linux. It’s used to display the files and…
The pwd (Print Working Directory) command is essential for navigating the Linux filesystem. It instantly shows your…