# Monsoon | Fast HTTP Enumerator

**URL:** <https://onehack.st/t/monsoon-fast-http-enumerator/106626>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [September 12, 2020, 2:01pm UTC](https://onehack.st/t/monsoon-fast-http-enumerator/106626 "2020-09-12T14:01:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [September 12, 2020, 2:01pm UTC](https://onehack.st/t/monsoon-fast-http-enumerator/106626/1 "2020-09-12T14:01:29Z")

</div>

![](https://github.com/RedTeamPentesting/monsoon/raw/master/demos/demo1.gif)

A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time.

**Example**  
Run an HTTP GET request for each entry in `filenames.txt` , hide all responses with the status code 403 or 404:

**Installation**

**Building from source**  
These instructions will get you a compiled version of the code in the master branch.  
You’ll need a recent version of the [Go compiler](https://golang.org/dl), at least version 1.11. For Debian, install the package `golang-go` .  
Clone the repository, then from within the checkout run the following command:

```auto
$ go build

```

Afterwards you’ll find a `monsoon` binary in the current directory. It can be for other operating systems as follows:

```auto
$ GOOS=windows GOARCH=amd64 go build -o monsoon.exe

```

**Unofficial Packages**  
For Arch Linux based distributions `monsoon` is available as an unofficial package on the [AUR](https://aur.archlinux.org/packages/monsoon). Using your AUR helper of choice such as [yay](https://github.com/Jguer/yay):

```auto
yay -S monsoon

```

**Getting Help**  
The program has several subcommands, the most important one is `fuzz` which contains the main functionality. You can display a list of commands as follows:

```auto
$ ./monsoon -hUsage: monsoon command [options]Available Commands: fuzz Execute and filter HTTP requests help Help about any command show Construct and display an HTTP request test Send an HTTP request to a server and show the result version Display version informationOptions: -h, --help help for monsoonUse "monsoon [command] --help" for more information about a command.

```

For each command, calling it with `--help` (e.g. `monsoon fuzz --help` ) will display a description of all the options, and calling `monsoon help fuzz` also shows an extensive list of examples.

**Wordlists**  
The [SecLists Project](https://github.com/danielmiessler/SecLists) collects wordlists that can be used with `monsoon` .

## GitHub:

[https://github.com/RedTeamPentesting/monsoon](https://github.com/RedTeamPentesting/monsoon)