⚡️ Echo Crawler v1.0 — Injection Point Discovery⚡️

[82]

thank you

[25]

This is a bump

[80]

is that who i think it is?

[140]

Thx boss

[25]

This is a bump

[119]

What it does
------------
Crawler that finds WHERE to inject — not a scanner.
Maps params, forms, paths, headers, cookies, GraphQL, JS APIs.
Output: targets.jsonl → feed into sqlmap / nuclei / ffuf / Burp.

Example line:
{"url":"...","method":"GET","type":"url","param":"id","value":"5","score":80,"domain":"..."}

Higher score = hit first.


Features
--------
• Up to 200 threads, depth crawl, same-domain follow
• Forms (incl. hidden), query params, REST path IDs
• Header/cookie candidates + GraphQL hints
• JS API extraction from linked .js
• robots.txt + sitemap (incl. indexes)
• Dedup + smart scoring (auth/API up, utm/csrf/pagination down)
• HTTP + SOCKS4/5 proxies, UA rotation, rate limit
• Live dashboard, -methods / -types / -min-score filters
• Ctrl+C safe, final JSONL matches top-N results


Usage
-----
echo-crawler.exe -seeds urls.txt -threads 80 -depth 2

Serious run:
echo-crawler.exe -seeds urls.txt -threads 100 -depth 3 -max-t 100 -min-score 40 -proxies proxies.txt -rate-ms 80

Filter:
echo-crawler.exe -seeds urls.txt -methods GET,POST -types url,body,path


Using the output
----------------
# top targets
jq -s 'sort_by(-.score)[] | "\(.score) \(.method) \(.type) \(.param) \(.url)"' targets.jsonl | head -40

# sqlmap
jq -r 'select(.type=="url" or .type=="body") | .url' targets.jsonl | sort -u > urls.txt
sqlmap -m urls.txt --batch --level=2 --risk=1


Workflow: seeds → echo-crawler → targets.jsonl → your scanner

Download :

Support / updates: t.me/devecho | t.me/clowntools | cracked.st/godclown | Discord: devecho

---

This is a bump

thankss

[358]

DSFDSFDS

[17]

Thank you for sharing looks clean