Origami

---

About   |   Features   |   Technologies   |   Requirements   |   Starting   |   License   |   Support   |   Author

🎯 About

Origami is a tool designed to identify potential origin server leaks by analyzing web applications. It scans a list of URLs, captures screenshots, and compares them to detect similarities that may indicate the presence of an origin server.

This tool was tested with Python 3.10 on macOS and Linux.

✨ Features

✔️ Scan URLs for potential origin server leaks;
✔️ Utilizes a custom score to detect similarities;
✔️ Export results to CSV or JSON;
✔️ Web interface to visualize results.

🚀 Technologies

The following tools were used in this project:

• Python
• Poetry
• Playwright

✅ Requirements

Before starting 🏁, you need to have Git and Poetry installed.

🏁 Starting

# Clone this project
$ git clone https://github.com/y0k4i-1337/origami

# Access
$ cd origami

# Install dependencies
$ poetry install

# Install headless browser
$ poetry run playwright install chromium

# Run the project
$ poetry run origami

Examples

Scan a single URL using a file containing IPs, defining custom ports:

$ poetry run origami scan -u https://example.com -i ips.txt -p 80,443,8080,8443

Scan multiple URLs using a file containing URLs, defining custom ports and concurrency:

$ poetry run origami scan -U urls.txt -p 80,443,8080,8443 -c 4 -i ips.txt

Start the web application on port 5000:

$ poetry run origami serve --port 5000

Export results to a CSV file:

$ poetry run origami export --csv results.csv

Export results to a JSON file, filtering by hostname:

$ poetry run origami export --json results.json --hostname contoso

Screenshots

📝 License

This project is under license from MIT. For more details, see the LICENSE file.

☕ Support

 

Made with 💚 by y0k4i

Back to top