Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Meta options

... or options that are mutualized among task categories for efficiency, speed, and user-friendliness.

Meta options apply to tasks, workflows, or scans. When passed to workflows or scans, they will be passed to each task contained in the runner.

Some tasks, workflows, or scans do not support some of the options mentioned below. Runsecator x/w/s <name> --help to get the complete list of supported options.

Execution Options

Threads (-threads)

Number of threads to use. Applies to all tasks supporting threads (or concurrency).

Example: set 50 threads
secator w host_recon mydomain.com -threads 50

Requests Options

The following options will apply to tasks making network requests (if they implement it), no matter the protocol used (HTTP, TCP, UDP, DNS, FTP, ...).

Proxy (-proxy)

Proxy (HTTP, Socks5, ...) to use when communicating with the targets.

Example: set proxies in config and -proxy to auto

Learn more about Proxies.

Rate limit (-rl)

Rate limit is an upper limit on the number of requests per second.

Example: set a rate limit of 50 requests/second

Timeout (-timeout)

Timeout is the time to wait (in seconds) before giving up on the request.

Example: set a request timeout of 10 seconds

Retries (-retries)

Number of retries for failed requests.

Example: set 5 retries for all requests

Delay (-d)

Delay to add between each request (in seconds).

Example: add a 0.5 second delay between requests

HTTP Options

The following options will apply to tasks making HTTP requests (if they implement it).

Header (-H)

Custom header to add to each request in the form "KEY1:VALUE1;; KEY2:VALUE2".

Example: set an Authorization and an Accept header

Method (-X)

HTTP method to use for request GET, POST, PUT, DELETE, etc...

Example: use POST method for fuzzing

Data (-data)

Data to send in the request body.

Example: send JSON data in POST request

User-agent (-ua)

Custom user-agent to use for request.

Example: use secator as a user agent value

Match regex (-mr)

Keep responses which body content match the input.

Example: keep responses which match the regexMySQLError.*

Match size (-ms)

Keep responses which body size (in bytes) match the input.

Example: keep responses with 1025 bytes

Match-words (-mw)

Keep responses which body word count match the input.

Example: keep responses with 10 words

Match code (-mc)

Keep responses which HTTP status codes match the input.

Example: keep responses matching HTTP statuses 200,400,501

Filter regex (-fr)

Filter out responses which body content match the input.

Example: filter out responses containing the string LoginPage

Filter codes (-fc)

Filter out responses which HTTP status codes match the input.

Example: filter out responses matching HTTP status 500

Filter size (-fs)

Filter out responses which body size (in bytes) match the input.

Example: filter out responses with 1025 bytes

Filter words (-fw)

Filter out responses which body word count match the input.

Example: filter out responses with 10 words

Follow redirect (-frd)

Follow all http redirects.

Example: follow HTTP redirects

Depth (-depth)

Scan depth for crawling tasks.

Example: set crawl depth to 3

Replay proxy (-P)

Proxy to use for replay requests (useful for fuzzing tasks).

Example: use a proxy for replay requests

Wordlist (-w)

Custom wordlist to use.

Example: use fuzz-Bo0oM wordlist

Port Scanning Options

The following options apply to port scanning tasks (e.g., naabu, nmap).

Ports (-p)

Only scan specific ports. Accepts a comma-separated list of ports, or - for all ports.

Example: scan ports 80, 443, and 8080

Top ports (-tp)

Scan the N most common ports.

PreviousGlobal options
NextInput formats

Last updated