ecto v0.1.7

Modern javascript application scanner

▓█████ ▄████▄ ▄▄▄█████▓ ▒█████
▓█ ▀ ▒██▀ ▀█ ▓ ██▒ ▓▒▒██▒ ██▒ ▒███ ▒▓█ ▄ ▒ ▓██░ ▒░▒██░ ██▒ ▒▓█ ▄ ▒▓▓▄ ▄██▒░ ▓██▓ ░ ▒██ ██░ ░▒████▒▒ ▓███▀ ░ ▒██▒ ░ ░ ████▓▒░ ░░ ▒░ ░░ ░▒ ▒ ░ ▒ ░░ ░ ▒░▒░▒░ ░ ░ ░ ░ ▒ ░ ░ ▒ ▒░ ░ ░ ░ ░ ░ ░ ▒
░ ░░ ░ ░ ░

[Scanning the shadows of the modern web...]

A reconnaissance tool for modern JavaScript web applications written in Crystal. Scans React, Next.js, and other framework-based applications to extract routes, leaky API endpoints, RSC data, build artifacts, SSRF vectors, and other useful intelligence.

Installation

  1. Install Crystal (>= 1.19.0)
  2. Clone the repository
  3. Run: shards build --release

Usage

ecto [options]

Options: -v, --verbose Verbose output -t, --threads=N Number of threads (default: 10) --timeout=SEC Request timeout in seconds (default: 15) -o, --output=FILE Output JSON file for results -h, --help Show help

Examples: ecto https://target.com ecto https://target.com -v -o results.json ecto https://target.com -t 20 --timeout 30

Development

Run tests: crystal spec Build: shards build

Repository

ecto

Owner
Statistic
  • 0
  • 0
  • 0
  • 0
  • 0
  • about 5 hours ago
  • January 29, 2026
License

MIT License

Links
Synced at

Tue, 03 Feb 2026 20:41:43 GMT

Languages