–exclude-response=PATH
Exclude responses similar to response of this page,
path as input (e.g. 404.html)
–skip-on-status=CODES
Skip target whenever hit one of these status codes,
separated by commas, support ranges
–min-response-size=LENGTH
Minimum response length
–max-response-size=LENGTH
Maximum response length
–max-time=SECONDS Maximum runtime for the scan
–exit-on-error Exit whenever an error occurs
Request Settings:
-m METHOD, --http-method=METHOD
HTTP method (default: GET)
-d DATA, --data=DATA
HTTP request data
–data-file=PATH File contains HTTP request data
-H HEADERS, --header=HEADERS
HTTP request header, can use multiple flags
–headers-file=PATH
File contains HTTP request headers
-F, --follow-redirects
Follow HTTP redirects
–random-agent Choose a random User-Agent for each request
–auth=CREDENTIAL Authentication credential (e.g. user:password or
bearer token)
–auth-type=TYPE Authentication type (basic, digest, bearer, ntlm, jwt)
–cert-file=PATH File contains client-side certificate
–key-file=PATH File contains client-side certificate private key
(unencrypted)
–user-agent=USER_AGENT
–cookie=COOKIE
Connection Settings:
–timeout=TIMEOUT Connection timeout
–delay=DELAY Delay between requests
-p PROXY, --proxy=PROXY
Proxy URL (HTTP/SOCKS), can use multiple flags
–proxies-file=PATH
File contains proxy servers
–proxy-auth=CREDENTIAL
Proxy authentication credential
–replay-proxy=PROXY
Proxy to replay with found paths
–tor Use Tor network as proxy
–scheme=SCHEME Scheme for raw request or if there is no scheme in the
URL (Default: auto-detect)
–max-rate=RATE Max requests per second
–retries=RETRIES Number of retries for failed requests
–ip=IP Server IP address
Advanced Settings:
–crawl Crawl for new paths in responses
View Settings:
–full-url Full URLs in the output (enabled automatically in
quiet mode)
–redirects-history
Show redirects history
–no-color No colored output
-q, --quiet-mode Quiet mode
Output Settings:
-o PATH/URL, --output=PATH/URL
Output file or MySQL/PostgreSQL URL (Format:
scheme://[username:password@]host[:port]/database-
name)
–format=FORMAT Report format (Available: simple,plain,json,xml,md,csv
,html,sqlite,mysql,postgresql)