Reconnaissance

Photon: Fast web crawler for Recon

Photon is a lightning fast web crawler which extracts URLs, files, intel & endpoints from a target. Usage -u –url Run Photon against a single website. python photon.py -u http://example.com Specifying a URL with it’s schema i.e. http(s):// is optional but you must add www. if the website has it. Tip

Photon is a lightning fast web crawler which extracts URLs, files, intel & endpoints from a target.

Usage

-u --url

Run Photon against a single website.

python photon.py -u http://example.com

Specifying a URL with it’s schema i.e. http(s):// is optional but you must add www. if the website has it.

Tip 💡 : If you feel like the crawling is taking too long or you just don’t want to crawl anymore, just press ctrl + c in your terminal and Photon will skip the rest of URLs.

-l --level

Depth of crawling.

python photon.py -u http://example.com -l 3

Default Value: 2

-d --delay

You can keep a delay between requests made to the target by specifying the time in seconds.

python photon.py -u http://example.com -d 1

Default Value: 0

-t --threads

Number of threads to use.

python photon.py -u http://example.com -t 10

Default Value: 2

Tip 💡 :
The optimal number of threads depends on your connection speed as well
as nature of the target server. If you have a decent network connection
and the server doesn’t have any rate limiting in place, you can use up
to 100 threads.

-c --cookie

Cookie to send.

python photon.py -u http://example.com -c "PHPSSID=821b32d21"

-n --ninja

Toggles Ninja Mode on/off.

python photon.py -u http://example.com --ninja

Default Value: False

Tip 💡 : Ninja mode uses the following websites to make requests on your behalf:

Please help me add more “APIs” to reduce load on their servers and turn off this mode whenever not required.

-s --seeds

Lets you add custom seeds, seperated by commas.

python photon.py -u http://example.com -s "http://example.com/portals.html,http://example.com/blog/2018"

-r --regex

Specify custom regex pattern to extract strings.

python photon.py -u http://example.com -r "d{10}"

The strings extracted using the custom regex pattern are saved in custom.txt.

Was this article helpful?

If something here is wrong or out of date, tell us and we will check the source.

Related reading

See all
AI

CISO Assistant — One-stop GRC Platform for Risk Management, AppSec

CISO Assistant offers a fresh perspective on Cybersecurity Management and GRC (Governance, Risk, and Compliance) practices: Features Upcoming features are listed on the roadmap. CISO Assistant is developed and maintained by Intuitem, a company specializing in Cybersecurity, Cloud, and Data/AI. Core

March 29, 2026
OSINT

WhatsApp Activity Tracker – Track WhatsApp by Phone Number

This project implements the research from the paper “Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers” by Gabriel K. Gegenhuber, Maximilian Günther, Markus Maier, Aljosha Judmayer, Florian Holzbauer, Philipp É. Frenzel, and Johanna Ullrich (Universi

December 12, 2025
AI

OpenUI – Next-Gen Tool for Building Powerful Applications

OpenUI aims to make the process fun, fast, and flexible. It lets users describe UI using their imagination, and then see it rendered live. You can ask for changes and convert HTML to React, Svelte, Web Components, etc. It’s like v0 but open source and not as polished 😝. Running Locally You can also

March 30, 2024
Reconnaissance

EmailAll – A powerful Email Collect tool

EmailAllis a powerful Email Collect tool —— a powerful email collection tool. Installation $ git clone https://github.com/Taonn/EmailAll.git $ cd EmailAll $ pip3 install -r requirements.txt EmailAll is a powerful Email Collect tool Example: python3 emailall.py check python3 emailall.py –domain examp

November 24, 2022