turbosearch(1)

📦 version 0.1.38, in debian trixie, ubuntu noble, ubuntu resolute, ubuntu stonking

🌸 turbosearch — wordlist url search tool 🌸

okay bestie, sit down, hydrate, because we're about to talk about turbosearch, a little section 1 manual page that is genuinely iconic. it's a wordlist url search tool, and yes, it's giving exactly what you think it's giving. 💅

💖 NAME 💖

turbosearch — wordlist url search tool. that's it, that's the name, no notes. ✨

🎀 OPTIONS 🎀

the invocation vibe is literally just:

turbosearch [OPTION]

short, sweet, main character energy. 🫶

🦋 DESCRIPTION 🦋

so this program was developed in Python, okay? and it's brute force style — the whole point of it is to go perform a search through a list of words. that's the mission. that's the assignment. 🎯

and it supports multi-threading, which means several simultaneous connections going at once, which means the search process gets sped up. it's fast, it's parallel, it's lowkey obsessed with efficiency. 🔥

🌈 USAGE 🌈

✨ optional arguments ✨

  • -h, --help — shows this help message and then exits. the classic. the beloved. the "wait what does this flag do again" saviour. 💖

⭐ General Setting ⭐

  • -t [target url] — the target url you're going after, bestie (ex: http://10.10.10.10/path)
  • -w [word list] — the word list that's gonna get tested
  • -T [tasks] — number of connects in parallel (per host, default: 16). so like, sixteen little connections holding hands and running at the same time. 👑
  • -o [output file] — save output to disk (default: none)
  • -x [extensions] — append each request with these extensions, comma-separated values, so you can serve looks in multiple formats at once 🎀

💜 Custom Settings 💜

  • -R, --restore — restore a previous aborted/crashed session. she remembers where she left off, no cap. 💀
  • -I, --ignore — ignore an existing restore file (and don't wait 10 seconds). impatient queen behaviour, we support it. ⏱️
  • -D, --double-path — multiply a payload set to search 2 path levels (ex: word1/word2). two levels deep, double the drama. 🙈
  • --proxy [target proxy] — target proxy URL (ex: http://127.0.0.1:8080)
  • --report-to [target proxy] — target proxy URL to report only successful requests (ex: http://127.0.0.1:8080)
  • --deep — Deep Search: look for URLs inside of HTML results. she goes deeper than the vibes, fr fr. 🔍
  • -v, --verbose — shows more options (-h -v). prints commands and outputs. (default: quiet) — so like, she starts talking and she does not stop. iconic. 🗣️
  • --full-log — print full requested URLs (default: no)
  • --no-forward-location — disable forward to Location response address (default: no)
  • --ignore-result [filter] — ignore results by result code or/and size (ex1: 302 or ex2: 302:172 or ex3: 405,302:172). yes bestie, you can filter with just a code, or code plus size with a colon, or a whole comma-separated lil combo. chef's kiss. 🍓
  • --find [text to find] — text to find in content or header (comma-separated values)
  • --method [http method] — specify request method (default: GET). available methods: GET, POST,PUT, PATCH, HEAD, OPTIONS, all or comma-separated values. (yes, POST,PUT is written exactly like that in the original, no space, we're keeping it, it's part of the lore. 💅)
  • --random-agent — use a randomly selected HTTP User-Agent header value (default: no). she's whoever she needs to be. 🧚
  • --header [headers] — JSON-formatted header key/value (ex: '{"PHPSESSID": "gvksi1cmjl2kqgntqof19sh823"}')
  • --ci, --case-insensitive — Case Insensitive search: put all wordlist in lower case. she doesn't care about your capital letters, and honestly? valid. ✨
  • --stats-db — save reported URI at SQLite local database called stats.db (default: no)
  • --no-robots — not look for robots.txt (default: no). we are ignoring the rules politely. 🚫🤖

🌸 Word List Options 🌸

  • --md5-search — search for a MD5 Hash version of each word (default: no)
  • --sha1-search — search for a SHA1 Hash version of each word (default: no)
  • --sha256-search — search for a SHA256 Hash version of each word (default: no)
  • --hash-upper — in case of Hash Search be enabled, also search by Uppercase of Hash Hex Text (default: no). uppercase edition, for when the lowercase wasn't enough. 👑
  • --no-dupcheck — do not check duplicate words in wordlist. use in case of big wordlists (default: False). big wordlist energy, no time for duplicates. 🔥

💫 EXAMPLES 💫

utilization samples, aka the group chat receipts:

turbosearch -t http://10.10.10.10/ -w /usr/share/dirb/wordlists/big.txt
turbosearch -t http://10.10.10.10/ -w /usr/share/dirb/wordlists/big.txt -x .html,.xml,.php,.txt
turbosearch -t http://10.10.10.10/ -w /usr/share/dirb/

look at her go. three little lines, three whole moods. 🦋

🫶 AUTHORS 🫶

written by Hélvio Junior (aka M4v3r1ck) <helvio_junior@hotmail.com> — absolute legend, we stan. 💖

this manual page was written by Josenilson Ferreira da Silva <nilsonfsilva@hotmail.com> — thank you for the lore, bestie. 🎀

for the Debian project (but may be used by others). sharing is caring, periodt. ✨

no cap, that's the whole page. every flag, every default, every example, every name — all of it, preserved, glowing, and ready for your terminal. 💅

turbosearch 0.1.25, DEZ 2022 — and that's the sign-off, mwah. 😘

📦 where this page comes from