From 40b329b2cfe0d9fc62e8096091719c2226b0ceb2 Mon Sep 17 00:00:00 2001 From: 0xflotus <0xflotus@gmail.com> Date: Thu, 22 Dec 2022 13:40:08 +0100 Subject: [PATCH 1/2] fix: small typo fix --- cmd/kiterunner/cmd/root.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/kiterunner/cmd/root.go b/cmd/kiterunner/cmd/root.go index 6b6e13e..9a6eacb 100644 --- a/cmd/kiterunner/cmd/root.go +++ b/cmd/kiterunner/cmd/root.go @@ -45,7 +45,7 @@ func init() { rootCmd.PersistentFlags().StringVarP(&Verbose, "verbose", "v", "info", "level of logging verbosity. can be error,info,debug,trace") rootCmd.PersistentFlags().StringVarP(&Output, "output", "o", "pretty", "output format. can be json,text,pretty") - rootCmd.PersistentFlags().BoolVarP(&Quiet, "quiet", "q", false, "quiet mode. will mute unecessarry pretty text") + rootCmd.PersistentFlags().BoolVarP(&Quiet, "quiet", "q", false, "quiet mode. will mute unnecessary pretty text") viper.BindPFlag("verbose", rootCmd.PersistentFlags().Lookup("verbose")) viper.BindPFlag("output", rootCmd.PersistentFlags().Lookup("output")) From feca4cd0ee22b55d7f69a03f44367ab59cc840b9 Mon Sep 17 00:00:00 2001 From: 0xflotus <0xflotus@gmail.com> Date: Thu, 22 Dec 2022 13:41:13 +0100 Subject: [PATCH 2/2] Update readme.md --- readme.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/readme.md b/readme.md index 699bc4a..096a3ef 100644 --- a/readme.md +++ b/readme.md @@ -146,7 +146,7 @@ Flags: Global Flags: --config string config file (default is $HOME/.kiterunner.yaml) -o, --output string output format. can be json,text,pretty (default "pretty") - -q, --quiet quiet mode. will mute unecessarry pretty text + -q, --quiet quiet mode. will mute unnecessary pretty text -v, --verbose string level of logging verbosity. can be error,info,debug,trace (default "info") ``` @@ -251,7 +251,7 @@ A key feature of kiterunner is depth based scanning. This attempts to handle det - At depth 1, `/api` and `/secrets` would have baseline checks performed; and these checks would be used against `/api` and `/secrets` correspondingly - At depth 2, `/api/v1`, `/api/v2`, `/secrets/v1` and `/secrets/v2` would all have baseline checks performed. -By default, `kr scan` has a depth of 1, since from internal usage, we've often seen this as the most common depth where virtual routing has occured. `kr brute` has a default depth of 0, as you typically don't want this check to be performed with a static wordlist. +By default, `kr scan` has a depth of 1, since from internal usage, we've often seen this as the most common depth where virtual routing has occurred. `kr brute` has a default depth of 0, as you typically don't want this check to be performed with a static wordlist. Naturally, increasing the depth will increase the accuracy of your scans, however this also increases the number of requests to the target. (`# of baseline checks * # of depth baseline directories`). Hence, we recommend against going above 1, and in rare cases going to depth 2. @@ -358,7 +358,7 @@ Flags: Global Flags: --config string config file (default is $HOME/.kiterunner.yaml) -o, --output string output format. can be json,text,pretty (default "pretty") --q, --quiet quiet mode. will mute unecessarry pretty text +-q, --quiet quiet mode. will mute unnecessary pretty text -v, --verbose string level of logging verbosity. can be error,info,debug,trace (default "info")``bigquery ```