Easily create permutations and combinations of words with predefined sets of extensions, words and patterns/function to create complex endpoints, wordlists and passwords. Easy UX, Checkout Usage
- Installation
- Usage
- Predefined Sets
- Using Files
- Cases
- Using COOK with other tools
- Useful Resources
- Contribute
- Upcoming Features
- All predefined sets list
go get github.com/giteshnxtlvl/cook
OR
GO111MODULE=on go get github.com/giteshnxtlvl/cook
go get -u github.com/giteshnxtlvl/cook
https://github.com/giteshnxtlvl/cook/releases/
By customizing you will able to make and use your own lists and patterns/functions.
Method 1
Cook's config file default location is $HOME/.config/cook/cook.yaml. For windows it will be %USERPROFILE%/.config/cook/cook.yaml
Method 2
- Download cook.yaml
- Create an environment variable
COOK=Path of file - Done, Run
cook -config
Method 3
Use -config-path flag to specify location of the file. This is useful if you want to try somebody else config file. This method will override COOK env variable.
Recipe
cook -start admin,root -sep _,- -end secret,critical start:sep:end
cook admin,root:_,-:secret,critical
Understanding concept is important!
Recipe
cook -start admin,root -sep _ -end secret start:sep:archive
cook admin,root:_:archive
Recipe
cook -name elliot -birth date(17,Sep,1994) name:birth
Recipe
cook -exp raft-large-extensions.txt:\.asp.* /:admin:exp
If file mentioned in param not found, then there will be no errors, instead it will do this
cook -file file_not_exists.txt admin,root:_:file
admin_file_not_exists.txt
root_file_not_exists.txt
Use -min <num> to print minimum no of columns to print.
Example this command will print 1,2,3 digit numbers
cook n:n:n -min 1
Use - as param value for pipe input
cook -d - d:anything
Don't parse the value
cook -word `date(10,12,1999)`
Checkout Resources.md
- Share your awesome recipes.
- Share useful lists and patterns for COOK.
- Share Ideas or new Feature Request.
- Check out discussions.
- Update Resources.md
- Add Useful Resources
- Add tools we can use with COOK.
Create discussions for these.
If you like the tool, support the development of tool, this will speed up development of Upcoming Features
- @giteshnxtlvl - Core
- @noraj - Added ffuf command in Using COOK with other tools and suggested nice appraoch for config file.
- Endpoints Analyser
- Interactive mode for configuring
cook.yaml
# Character set like crunch
charSet:
sep : [_- ] #common separators
n : [0123456789]
A : [ABCDEFGHIJKLMNOPQRSTUVWXYZ]
a : [abcdefghijklmnopqrstuvwxyz]
aAn : [abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]
An : [ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]
an : [abcdefghijklmnopqrstuvwxyz0123456789]
aA : [abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ]
s : ["!#$%&'()*+,-./:;<=>?@[\\]^_`{|}~&\""]
all : ["!#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\""]
# File to access from anywhere
files:
raft_ext : [E:\tools\wordlists\SecLists\Discovery\Web-Content\raft-large-extensions.txt]
raft_dir : [E:\tools\wordlists\SecLists\Discovery\Web-Content\raft-large-directories.txt]
raft_files : [E:\tools\wordlists\SecLists\Discovery\Web-Content\raft-large-files.txt]
robot_1000 : [E:\tools\wordlists\SecLists\Discovery\Web-Content\RobotsDisallowed-Top1000.txt]
# Create your lists
lists:
schemas : [aim, callto, cvs, data, facetime, feed, file, ftp, git, gopher, gtalk, h323, hdl, http, https, imap, irc, irc6, ircs, itms, javascript, magnet, mailto, mms, msnim, news, nntp, prospero, rsync, rtsp, rtspu, sftp, shttp, sip, sips, skype, smb, snews, ssh, svn, svn, svn+ssh, telnet, tel, wais, ymsg]
bypass : ["%00", "%09", "%0A", "%0D", "%0D%0A"]
admin_set : [admin, root, su, superuser, administration]
api : [/v1/,/v2/,/v3/,/v4/,/v5/,/api/]
pass_ends : [123, "@123", "#123"]
months : [January, February, March, April, May, June, July, August, September, October, November, December]
mons : [Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec]
# Patterns
patterns:
date :
- date(D,M,Y)
- DMY
- MDY
- D/M/Y
- M/D/Y
- D-M-Y
- M-D-Y
- D.M.Y
- M.D.Y
- D.Y
- M.Y
- D.M
# Extension Set, . will added before using this
extensions:
config : [conf, confq, config]
data : [xml, json, yaml, yml]
backup : [bak, backup, backup1, backup2]
exec : [exe, msi, bin, command, sh, bat, crx]
web : [html, html5, htm, js, jsx, jsp, wasm, php, php3, php5, php7]
iis : [asax, ascx, asmx, aspx, exe, aspx.cs, ashx, axd, config, htm, jar, js, rdl, swf, txt, xls, xml, xsl, zpd, suo, sln]
archive : [7z, a, apk, xapk, ar, bz2, cab, cpio, deb, dmg, egg, gz, iso, jar, lha, mar, pea, rar, rpm, s7z, shar, tar, tbz2, tgz, tlz, war, whl, xpi, zip, zipx, xz, pak, tar.gz, gz]
code : [c, cc, class, clj, cpp, cs, cxx, el, go, h, java, lua, m, m4, php, php3, php5, php7, pl, po, py, rb, rs, sh, swift, vb, vcxproj, xcodeproj, xml, diff, patch, js, jsx]
#Rest
css_type: [css, less, scss]
sheet : [ods, xls, xlsx, csv, ics vcf]
slide : [ppt, pptx, odp]
font : [eot, otf, ttf, woff, woff2]
text : [doc, docx, ebook, log, md, msg, odt, org, pages, pdf, rtf, rst, tex, txt, wpd, wps]
audio : [aac, aiff, ape, au, flac, gsm, it, m3u, m4a, mid, mod, mp3, mpa, pls, ra, s3m, sid, wav, wma, xm]
book : [mobi, epub, azw1, azw3, azw4, azw6, azw, cbr, cbz]
video : [3g2, 3gp, aaf, asf, avchd, avi, drc, flv, m2v, m4p, m4v, mkv, mng, mov, mp2, mp4, mpe, mpeg, mpg, mpv, mxf, nsv, ogg, ogv, ogm, qt, rm, rmvb, roq, srt, svi, vob, webm, wmv, yuv]
image : [3dm, 3ds, max, bmp, dds, gif, jpg, jpeg, png, psd, xcf, tga, thm, tif, tiff, yuv, ai, eps, ps, svg, dwg, dxf, gpx, kml, kmz, webp]