diff --git a/README.md b/README.md index 824c290..7e04cf0 100644 --- a/README.md +++ b/README.md @@ -61,6 +61,7 @@ This attack is also known as Predictable Resource Location, File Enumeration, Di ----------------- - [Installation](#-installation) - [Download a Release](#download-a-release) + - [Snap Install](#snap-install) - [Homebrew on MacOS and Linux](#homebrew-on-macos-and-linux) - [Cargo Install](#cargo-install) - [apt Install](#apt-install) @@ -115,9 +116,34 @@ Expand-Archive .\feroxbuster.zip .\feroxbuster\feroxbuster.exe -V ``` +### Snap Install + +Install using `snap` + +``` +sudo snap install feroxbuster +``` + +The only gotcha here is that the snap package can only read wordlists from a few specific locations. There are a few +possible solutions, of which two are shown below. + +If the wordlist is on the same partition as your home directory, it can be hard-linked into `~/snap/feroxbuster/common` + +``` +ln /path/to/the/wordlist ~/snap/feroxbuster/common +./feroxbuster -u http://localhost -w ~/snap/feroxbuster/common/wordlist +``` + +If the wordlist is on a separate partition, hard-linking won't work. You'll need to copy it into the snap directory. + +``` +cp /path/to/the/wordlist ~/snap/feroxbuster/common +./feroxbuster -u http://localhost -w ~/snap/feroxbuster/common/wordlist +``` + ### Homebrew on MacOS and Linux -Installable by Homebrew throughout own formulas: +Install using Homebrew via tap 🍏 [MacOS](https://github.com/TGotwig/homebrew-feroxbuster/blob/main/feroxbuster.rb) diff --git a/snapcraft.yaml b/snapcraft.yaml new file mode 100644 index 0000000..2480045 --- /dev/null +++ b/snapcraft.yaml @@ -0,0 +1,41 @@ +name: feroxbuster +version: git +summary: A simple, fast, recursive content discovery tool written in Rust +description: | + feroxbuster is a tool designed to perform Forced Browsing. + + Forced browsing is an attack where the aim is to enumerate and access resources that are not referenced by the web application, but are still accessible by an attacker. + + feroxbuster uses brute force combined with a wordlist to search for unlinked content in target directories. These resources may store sensitive information about web applications and operational systems, such as source code, credentials, internal network addressing, etc... + + This attack is also known as Predictable Resource Location, File Enumeration, Directory Enumeration, and Resource Enumeration. + + +base: core18 + +plugs: + etc-feroxbuster: + interface: system-files + read: + - /etc/feroxbuster + dot-config-feroxbuster: + interface: personal-files + read: + - $HOME/.config/feroxbuster + +architectures: + - build-on: amd64 + - build-on: i386 + +parts: + feroxbuster: + plugin: rust + source: . + +apps: + feroxbuster: + command: bin/feroxbuster + plugs: + - etc-feroxbuster + - dot-config-feroxbuster + - network