ENNAENNA

Katana

MIT

馃暩 Web Scanning 路 Go

Katana is a next-generation web crawling and spidering framework designed for efficient data gathering. It operates in both headless browser and standard modes, enabling it to automatically fill forms and navigate complex web structures. Developed in Go, Katana is optimized for performance and flexibility, making it suitable for both simple and advanced web reconnaissance tasks. Its ability to handle dynamic content makes it a valuable asset for penetration testers and researchers.

16.6kstars
1.1kforks
13issues
Updated 17d ago
+I use this
馃惓 Docker Ready
View on GitHub

Installation

$ go install github.com/projectdiscovery/katana/cmd/katana@latest

Tags

crawlerspiderheadlessprojectdiscoverycligocrawlerhacktoberfestspider-frameworkweb-spider

Details

Category
馃暩 Web Scanning
Language
Go
License
MIT
Platforms
馃惂linux馃崕macos馃獰windows

Links

GitHub Repository

github.com/projectdiscovery/katana

Releases

github.com/projectdiscovery/katana/releases

Issues

github.com/projectdiscovery/katana/issues

Sponsored

Your ad here

Reach security professionals and developers - ads@en-na.com

Used in 2 Workflows

馃暩

Web Application Penetration Test

Intermediate 路 6 steps 路 1-5 days

馃幆

Bug Bounty Recon Pipeline

Beginner 路 7 steps 路 2-4 hours

Community Reviews

Alternatives & Comparisons

Aquatone

Go

Visual web discovery tool. Takes screenshots of web pages across large target lists and generates browsable HTML reports.

Compare Katana vs Aquatone

EyeWitness

Python

Web screenshot and categorization tool. Captures screenshots of web pages, RDP, and VNC services with auto-categorization.

Compare Katana vs EyeWitness

More in Web Scanning

httpx

Go

Fast multi-purpose HTTP toolkit. Probes for running HTTP servers with retries and fallbacks.

http-probetech-detectionprojectdiscovery

Nikto

Perl

Classic web server scanner. Tests for dangerous files, outdated server software, and version-specific problems.

web-serverclassiccgi-scan

Gobuster

Go

Directory/file, DNS, and vhost busting tool. Brute-forces URIs, DNS subdomains, virtual host names, and S3 buckets.

directory-brutedns-brutevhost

Feroxbuster

Rust

Fast, recursive content discovery tool written in Rust. Like gobuster on steroids with auto-recursion.

directory-bruterecursiverust

Burp Suite Community

Java

Web vulnerability scanner and proxy. Intercept, modify, and replay HTTP/S traffic for web app testing.

proxyweb-appinterceptor

ffuf

Go

Fast web fuzzer written in Go. Fuzz anything - URLs, headers, POST data - with blazing speed.

fuzzingdirectory-brutefast