letsgo - Local Enumeration & Traversal Scanner in Go

Installation && Update

Prerequisites: You need to have Go installed and add $GOPATH/bin to $PATH, you can use go version to check whether you have installed it. For the $PATH issue, you can see the details at the official docs

Install and update are quite easy, they use the same command, just run the following command then everything's done.

go install github.com/CX330Blake/letsgo@latest

Usage

Use letsgo --help to see the full usage.

Basic usage

Use the default settings to scan a URL.

letsgo --url <https://example.com>

What it looks like?

Labs

If you want to check what it can does, you can use the labs provided by Port Swigger. There're 6 labs which varies in defferent bypass skill to exploit the path traversal vulnerability, and letsgo can deal with ALL of them, quick, and precise. Use the lab to learn more about path traversal, GLHF!

• PortSwigger - File path traversal, simple case
• PortSwigger - File path traversal, traversal sequences blocked with absolute path bypass
• PortSwigger - File path traversal, traversal sequences stripped non-recursively
• PortSwigger - File path traversal, traversal sequences stripped with superfluous URL-decode
• PortSwigger - File path traversal, validation of start of path
• PortSwigger - File path traversal, validation of file extension with null byte bypass

To-Dos

1. Add the customize file name (e.g. flag.txt)