Skip to content

Commit

Permalink
chore: Release
Browse files Browse the repository at this point in the history
- Added contribute section to docs
- Update and Minor Fix for documentation
- Remove unused dev testing
- Migrate wseye to wsee
- Bump version
;
  • Loading branch information
MC874 committed Oct 7, 2022
1 parent 80c4875 commit 6ce9fb3
Show file tree
Hide file tree
Showing 4 changed files with 180 additions and 150 deletions.
2 changes: 1 addition & 1 deletion .wsee/VERSION
Original file line number Diff line number Diff line change
@@ -1 +1 @@
1.10.0
1.11.0
18 changes: 12 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# wsee
A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but more focused on `CloudFlare` and `CloudFront` CDN. This tool provides multiple technique to ensure target endpoint can fall under specific protocol, indicated via `101` statuses. Can be used for **Bug Hunters** to find any delicate domain related to CDN especially on FreeNet / Free Internet fields.
A CDN Domain Fronting Tool or Websocket Discovery. This tool provides multiple technique to ensure target endpoint can fall under specific protocol, indicated via `101` statuses. Can be used for **Bug Hunters** to find any delicate domain related to CDN. Should work on any CDN but only featured `Cloudflare` and `Cloudfront` as in-built ready to use.

## Features
- `wsee: to go` an Easy to use, scans whenever needed with Clean interactive Python script. Usable across any device that supports for `python`. PS: Even work on `Termux` and `WSL`.
Expand All @@ -9,9 +9,10 @@ A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but mo
- ***Don't have a wordlist?*** : `wsee` got you covered with `Online Subdomain Enumeration` feature using `HackerTarget` as source.
- Accept `.csv` as wordlist, breaking the barrier of must used `.txt` and made it compatible for other Enumeration Tool Output.
- Supports for Internal Storage for `Termux` users.
- Supports for HTTP2 Protocol Upgrade indicated as `h2c`.
- Supports for `HTTP/2` Protocol (clear-text only).
- New `Rotate` Mode feature; Now you can rotate `proxy` and `hostname` individually. This is useful if the target only accept specific proxy or ssl masking.
- Auto script updater handled with config located in `.wsee/CONFIG`
- Also include `Normal` mode, to find SSL/Direct bugs without protocol or domain fronting.
- New Enhancement each Updates

# How it works
Expand All @@ -20,7 +21,7 @@ The tool works; is by following the general idea of Upgrading protocol indicated
```
headers = { "Connection": "Upgrade", "Upgrade": protocol }
```
Even though it uses a basic headers, some Endpoint are Headers dependant. In `websocket` for example; it may require `X-SS` or `Sec-` or `User-Agent` entry in order upgrade connection to be accepted by the server, this usually happen on `Amazon` endpoints. Make sure to add those manually into the headers and the script will do the rest.
Even though it uses a basic header, some Endpoint are Headers dependant. In `websocket` for example; it may require `X-SS` or `Sec-` or `User-Agent` entry in order upgrade connection to be accepted by the server, this usually happen on `Amazon` endpoints. Make sure to add those manually into the headers and the script will do the rest.

##### **SSL Failure**
In the newer version of `OpenSSL`; it doesn't support `Legacy Connection` and consider it as an exception. Due to this, you need to install custom OpenSSL Config by simply define it into your environment variable:
Expand All @@ -45,7 +46,7 @@ For Termux users; you can now takes input from Internal Storage. `Termux` is abl
termux-setup-storage
```
##### **Disable Update**
Latest releases introduce auto-update feature. It's a small feature but you're now no longer needs to scrape whole directory to install new releases. You can just change `true` statement into `false` inside wsee config located in `.wsee/CONFIG`:
Latest releases introduce auto-update feature. It's a small feature but now, you're no longer need to scrape the whole directory to install new releases. To `Disable` it: You can just change `true` statement into `false` inside **WSee** config located in `.wsee/CONFIG`:
```
{
"config":{
Expand All @@ -55,7 +56,7 @@ Latest releases introduce auto-update feature. It's a small feature but you're n
```

# Installation
`wsee` uses 3rd-party module, make sure to install `requests` before running, or else:
**WSee** uses 3rd-party module, make sure to install `requests` before running, or else:
```
apt install python3, python3-pip
apt install git
Expand All @@ -71,7 +72,12 @@ This Repo is build on top of other works, I'm not a jerk that steals other peopl
- Thanks to [@fdxreborn](https://github.com/fdxreborn) for letting me to enhance his tools. This Repo is built on top of his awesome works at [cfchecker](https://github.com/fdxreborn/cfchecker)
- Also thanks to [@PalindromeLabs](https://github.com/PalindromeLabs) for ZGrab uses in Websocket Discovery. This repo borrows some material from [STEWS: Security Testing and Enumeration of WebSockets](https://github.com/PalindromeLabs/STEWS)

You can also support my work by offering me some free Doughnut xD:
# Contribute
You can also contribute to this project by creating a pull-request or donating some CDN domain. Your contribution will be listed in our [Guild](https://github.com/Guild-Net) as-well in future content related to **WSee**. Currently; we're looking for `(GCP) Google Cloud Platform`, `Akamai` and `Fastly` CDN Domain. Alternatively, you can also support my work by offering me some free Doughnut xD:
https://saweria.co/mc874

**Do note that** :
- Your CDN domain will be used for `domain-fronting` purposes.
- The risk of being public should be taken as personal consideration.

<p align="center"><img alt="Preview" src="https://i.postimg.cc/bYkbMnFQ/Screenshot-2022-05-23-16-40-37-84.jpg"></p>
Loading

0 comments on commit 6ce9fb3

Please sign in to comment.