Katana
Next-gen crawling & spidering framework.
KaliParrotmedium
pkg: katana
Katana crawls sites (incl. JS rendering) to enumerate endpoints, JS files and parameters for further testing.
Syntax
katana -u {url}
Example
katana -u https://example.com -jc
Crawls the site and parses JavaScript (-jc) for hidden endpoints.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
katana
Usage examples
katana -u https://target.tld -jc
Crawl incl. JavaScript endpoints.
katana -u https://t -headless -d 3
Headless deep crawl.
Advantages
- JS-aware crawling
- Fast, pipeline-friendly
Disadvantages
- Active crawling
- Headless mode is heavier
Tags
#web#crawler
Official docs: Katana ↗
Related commands
Frequently asked questions
What is Katana used for?
Katana crawls sites (incl. JS rendering) to enumerate endpoints, JS files and parameters for further testing.
What is an example Katana command?
A common example is: katana -u https://example.com -jc — Crawls the site and parses JavaScript (-jc) for hidden endpoints.
Is Katana part of Kali Linux?
Yes. Katana ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install katana.
What category of security tool is Katana?
Katana is a Web Application tool with a medium-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.