Footprinting with Python

---

This is a tool used for footprinting web applications by retrieving the application's headers.

This project is also a skill showcase. For this showcase, the tool was used to footprint an application running within a Docker container. The image used was a OWASP WebGoat container running on Docker.

The concept for this project was based on the Coursera Guided Project. Although, the source code present here was created, debugged, and tested by the owner of this repository.

For the tool's functionality, you can click here: Tool

For the skill showcase, you can click here: Showcase

---

How to use the tool

The tool was designed to be used on linux's terminal.

You can use it by downloading source code on footprint, which can be run from anywhere by adding the file to the /bin folder.

Otherwise, you can download the Python 3 source code on footprint.py, using this code you'll need to execute the command python3 ./footprint.py [args].

Alternatively, you can clone this repository by executing the following command:

git clone https://github.com/ItaloHugoMDS/Footprinting_with_Python.git

---

Syntax

The tool requires a few arguments to be run successfully.

You can either specify a single URL while executing the script. For example:

./footprint "https://google.com"

If you are using the Python 3 script:

python3 footprint.py "https://google.com"

However, the tool also accepts multiple URLs at once. To run the script through multiple URLs, you should create a file listing them. You can see an example of such a file under recon.txt.

After creating a file with the URLs, just like in recon.txt, you can execute the following command:

./footprint [URL_list.txt]

In case you use the Python 3 script, you can run:

python3 footprint.py [URL_list.txt]

To run the code using the ".txt" file from this repository, you can run:

./footprint recon.txt

Using the Python 3 script:

python3 footprint recon.txt

The output will look similar to this:

---

Showcase

For this showcase, a Docker container running a version of WebGoat was started to be footprinted by the tool. To further understanding of how to run the application check out WebGoat GitHub.

Running web application:

A specific endpoint from the application was footprinted by the tool.

The application's endpoint:

The footprint done by the tool:

The result returned by the tool only had little information. But the footprint was successfully executed.