BLHawk is a security tool that identifies broken link vulnerabilities across popular platforms. It helps detect potential account hijacking risks by analyzing URLs on services like Telegram, YouTube, Medium, and GitHub.
- Supports the following services:
- Telegram (
t.me,telegram.me) - YouTube (
youtube.com,www.youtube.com) - Medium (
medium.com) - GitHub (
github.com) - Soundcloud (
soundcloud.com) - Google Play (App/Developer Page) (
play.google.com) - Buy Me a Coffee (
buymeacoffee.com) - Dribbble (
dribbble.com) - npmjs (
www.npmjs.com) - pypi project (
pypi.org) - Myket (
myket.ir) - CafeBazaar (
cafebazaar.ir) - DEV Community (
dev.to) - Vimeo (
vimeo.com) - twitch (
twitch.tv) - GitLab(
gitlab.com) - Pinterest (
pinterest.com,www.pinterest.com)
- Telegram (
- Sends HTTP requests and analyzes server responses to detect vulnerabilities
- Color-coded output (green for vulnerable, red for not vulnerable)
Future Work: More services will be added soon with contributions from the community to enhance the tool’s coverage and capabilities.
Note: Some popular websites — such as Instagram, Twitter, and similar platforms — have not been included by default due to strict rate-limiting restrictions that prevent effective automated testing.
If you have suggestions on how support for these platforms can be added despite these limitations, feel free to open an issue.
- Python 3.x must be installed.
- Internet access to install dependencies.
- Clone the repository:
git clone https://github.com/omranisecurity/BLHawk.git cd BLHawk - Install required packages:
pip install -r requirements.txt
Scan a single URL:
python blhawk.py -u https://target.com/example- Support for scanning single URLs
- Add support for scanning multiple URLs from a list file
- Implement flags such as
--silent,--output,--thread, and--help - Expand supported services with community contributions
Contributions are welcome! Please open an issue before submitting pull requests. This helps us discuss ideas and track bugs effectively.