CheckScope

Useful tool for checking if the URLs you provided are in or out of the scope of a Bug Bounty Program.

Install

go install github.com/vitorfhc/checkscope@latest

Usage

Get everything in scope

cat all-urls.txt | checkscope

Get everything out-of-scope

cat all-urls.txt | checkscope -r

Define a diferent scope file

cat all-urls.txt | checkscope -f scopefile.txt

See other flags

checkscope -h

Scope file

The scope file (scope.txt by default) must contain the matching scope.

Example

*.foo.com
bar.com
*.zed.*

Hostname	Matches
https://xablau.foo.com/a/b/c?a=1	Yes
xablau.foo.com/a/b/c?a=1	Yes
abc.foo.com	Yes
a.zed.b	Yes
foo.com	No
sadad.net	No
sub.bar.com	No

In the example above, if you want foo.com to match you must use one of the following:

*.foo.com
foo.com

or

*foo.com