Orunmila

A simple tool to refine and produce lists for your bugbounty and pen-test engagements.

The idea behind it is fairly simple, a small sqlite(??) database with each word associated tags. Each word in the dictionary can be associated with multiple tags. This provides for a way to later request the words from a database based on specific tags and use the generated wordlist with you normal tools, be it ffuf, dirbuster etc.

Installation

GO111MODULE=on go install github.com/proditis/orunmila@latest

Building

NOTE: This is still a really early prototype so not much of a build system into the mix.

export CGO_ENABLED=1
go get github.com/mattn/go-sqlite3
go get github.com/sirupsen/logrus
go build orunmila.go

Subcommands

• add words from the cli

  orunmila add -tags a,b,c word1 word2 word3

• import words from a file

  orunmila import -tags a,b,c filename

• search words

    orunmila search -tags a,b,c filename
  

• vacuum database and apply any schema updates

  orunmila vacuum a

• describe a database

  orunmila describe My Description for this database

• info return information about a database

  $ orunmila info all
  [version]: 0.0.0
  [dbname]: default
  [description]: My Description for this database

Examples

• Import words from lista.txt and tag as lista

  orunmila import -tags lista lista.txt
  

• List words with tag as lista

  orunmila search -tags lista
  

• Import words from listb.txt and tag as listb

  orunmila import -tags listb listb.txt
  

• List words with tag as listb

  orunmila search -tags listb
  

• Import words from lista.txt and listb.txt and tag as listc

  orunmila import -tags listc lista.txt listb.txt
  

• List words with tag as listc (should return all words)

  orunmila search -tags listc
  

Drupal example

Take the following hypothetical scenario, we have a target system that is based on drupal. We have already populated our orunmila.db with appropriate words and tags before hand.

Using orunmila we extract the keywords that match our criteria

orunmila search -tags drupal,dir,nginx,php >drupal_words.txt
ffuf -w drupal_words.txt -u https://drupal-target/FUZZ

The tool supports using specific database files ie

orunmila search -db programXYZ.db -tags nginx,soap,swift,api,xml

You can use Orunmila to import wordlists into your database with given set of tags. Existing words will have their tags updated to include old and new ones

orunmila import -db programXYZ.db -tags raft,directories,manual raft-medium-directories.txt

Add a new drupal entry you discovered from the command line (without file)

orunmila add -tags drupal,directory word1 word2