# Katana

> katana

- Skill: `sameh1200/katana-2` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add sameh1200/katana-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/sameh1200/katana-2/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: Sameh1200 (https://skillmd.com/u/sameh1200)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/sameh1200/katana-2

---

# katana

## Repo
https://github.com/projectdiscovery/katana

## Installation
```bash
go install github.com/projectdiscovery/katana/cmd/katana@latest
```

## Using
```bash
# Single target
katana -u https://target.com -o urls.txt

# From list
katana -list live.txt -o crawled.txt

# JS + depth
katana -u https://target.com -jc -d 3 -o deep.txt

# Silent + known files
katana -u https://target.com -silent -known-files all
```

## Real-time usage (typical)
| Scope | Duration | Notes |
|-------|----------|-------|
| Single site depth 2 | 30 s – 3 min | default |
| JS crawl depth 3 | 2 – 15 min | -jc heavier |
| 50 live hosts | 10 – 40 min | parallel list |
| Known-files only | faster | -known-files all |

Depth and -jc are the main time drivers. Keep concurrency moderate on shared infrastructure.

## Current Step
Endpoint and URL discovery via crawling (including JavaScript).

## Next Step
Extract parameters, feed unique URLs into nuclei or ffuf, analyze JS for secrets / endpoints.

## Errors Fixes
- Slow → lower -c concurrency, raise -timeout
- Missing JS links → enable -jc
- Rate limited → -rate-limit 50
- Binary not found → export PATH=$PATH:$(go env GOPATH)/bin