meg - Fetch Many Paths For Many Hosts (Without Killing The Hosts)

meg is a tool for fetching lots of URLs but still being 'nice' to servers.
It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating.
You get lots of results quickly, but non of the individual hosts get flooded with traffic.

meg is written in Go and has no run-time dependencies. You can install it with go get:
▶ go get -u
Or download a binary and put it somewhere in your $PATH.

Basic Usage
Given a file full of paths:
And a file full of hosts (with a protocol):
meg will request each path for every host:
▶ meg --verbose paths hosts
out/ (404 Not Found)
out/ (404 Not Found)
out/ (404 Not Found)
out/ (404 Not Found)
out/ (404 Not Found)
And save the output in a directory called ./out:
▶ head -n 20 ./out/

> GET /robots.txt HTTP/1.1
> Host:

< HTTP/1.1 404 Not Found
< Expires: Sat, 06 Jan 2018 01:05:38 GMT
< Server: ECS (lga/13A2)
< Accept-Ranges: bytes
< Cache-Control: max-age=604800
< Content-Type: text/*
< Content-Length: 1270
< Date: Sat, 30 Dec 2017 01:05:38 GMT
< Last-Modified: Sun, 24 Dec 2017 06:53:36 GMT
< X-Cache: 404-HIT

<!doctype html>
Without any arguments, meg will read paths from a file called ./paths, and hosts from a file called ./hosts. There will also be no output:
▶ meg
But it will save an index file to ./out/index:
▶ head -n 2 ./out/index
out/ (404 Not Found)
out/ (404 Not Found)
You can use the index file to find where the response is stored, but it's often easier to find what you're looking for with grep:
▶ grep -Hnri '< Server:' out/
out/< Server: ECS (lga/13A2)
out/< Server: ECS (lga/13A3)
If you want to request just one path, you can specify it directly as an argument:
▶ meg /admin.php

Detailed Usage
meg's help output tries to actually be helpful:
▶ meg --help
Request many paths for many hosts

  meg [path|pathsFile] [hostsFile] [outputDir]

  -c, --concurrency <val>    Set the concurrency level (defaut: 20)
  -d, --delay <val>          Milliseconds between requests to the same host (defaut: 5000)
  -H, --header <header>      Send a custom HTTP header
  -r, --rawhttp              Use the rawhttp library for requests (experimental)
  -s, --savestatus <status>  Save only responses with specific status code
  -v, --verbose              Verbose mode
  -X, --method <method>      HTTP method (default: GET)

  pathsFile: ./paths
  hostsFile: ./hosts
  outputDir:  ./out

Paths file format:

Hosts file format:

  meg /robots.txt
  meg hosts.txt paths.txt output

By default meg will attempt to make 20 concurrent requests. You can change that with the -c or --concurrency option:
▶ meg --concurrency 5
It's not very friendly to keep the concurrency level higher than the number of hosts - you may end up sending lots of requests to one host at once.

By default meg will wait 5000 milliseconds between requests to the same host. You can override that with the -d or --delay option:
▶ meg --delay 10000
Warning: before reducing the delay, ensure that you have permission to make large volumes of requests to the hosts you're targeting.

Adding Headers
You can set additional headers on the requests with the -H or --header option:
▶ meg --header "Origin:"
▶ grep -h '^>' out/*
> GET /.well-known/security.txt HTTP/1.1
> Origin:
> Host:

Raw HTTP (Experimental)
If you want to send requests that aren't valid - for example with invalid URL encoding - the Go HTTP client will fail:
▶ meg /%%0a0afoo:bar
request failed: parse invalid URL escape "%%0"
You can use the -r or --rawhttp flag to enable use of the rawhttp library, which does little to no validation on the request:
▶ meg --verbose --rawhttp /%%0a0afoo:bar
out/ (HTTP/1.1 404 Not Found)
The rawhttp library and its use is experimental. Amongst other things it doesn't yet support chunked transfer encoding, so you may notice chunk lengths interspersed with your output if you use it.

Saving Only Certain Status Codes
If you only want to save results that returned a certain status code, you can use the -s or --savestatus option:
▶ meg --savestatus 200 /robots.txt

Specifying The Method
You can specify which HTTP method to use with the -X or --method option:
▶ meg --method TRACE
▶ grep -nri 'TRACE' out/
out/> TRACE /robots.txt HTTP/1.1
out/> TRACE /.well-known/security.txt HTTP/1.1

meg - Fetch Many Paths For Many Hosts (Without Killing The Hosts) meg - Fetch Many Paths For Many Hosts (Without Killing The Hosts) Reviewed by Lydecker Black on 10:06 AM Rating: 5