A-TIER tool
Katana crawler — fast JS endpoint and API route discovery for web recon
100k ft — What is this?
Katana crawler — fast JS endpoint and API route discovery for web recon
50k ft — Why care?
ProjectDiscovery's Katana crawls web apps to surface endpoints, URLs, parameters and JavaScript files, prioritizing JS endpoints and API routes. Demoed on Kali Linux against a lab VM. Use only on systems you are authorized to test.
10k ft — Key takeaways
• Good fit for CTFs and authorized pentests
• Katana pulls API routes out of JavaScript early in recon
• Run against owned or permitted targets only
• link: https://github.com/projectdiscovery/katana
5k ft — Tools & techniques
Kali Linux, Katana
API integration, endpoint discovery, web spidering
1k ft — Deep-dive / try it
This Web Crawler Finds Hidden Website Paths FAST 👀💻 Katana is a powerful web crawling tool used by cybersecurity professionals to discover endpoints, URLs, parameters, JavaScript files and more. ⚠️ Educational purposes only. Only test websites and systems you own or have explicit permission to test. #CyberSecurity #EthicalHacking #Katana #WebSecurity #HackingTools
Transcript excerpt
Katana, yeah that's what I thought, check this out. So this is available on their GitHub repository. This is just one of their examples. If you run Katana and then with the URL, it basically spied as a web application. So if you're on Kali Linux, you can go ahead and run this. I already got it installed. So right here, I've got a virtual machine running. I'm going to copy the URL and paste it in the Katana tool. So check this out. Oops, let's do that again. Shift V, here we go. Let's run it and let's see what it does. So you can see that it's crawling the web application. You're probably thinking, Declan, so how is this any different from any other directory search spidering tool? Well, if you really want to know more about it in detail, you can check out the GitHub repository that they've got. I'm actually going to use this more often in my CTFs and everything that I do online. It finds JavaScript endpoints and API routes first, which I actually really like. But if you guys want to learn more about this, I've got a school community that you guys can go check out. The link is in the bio.