Add option to skip ssl cert verification

cmd/scout/main.go

@@ -159,6 +159,7 @@ var noColours = false
 var wordlistPath string
 var debug bool
 var filename string
+var skipSSLVerification bool
 
 func main() {
 
@@ -168,6 +169,7 @@ func main() {
 	rootCmd.Flags().StringVarP(&wordlistPath, "wordlist", "w", wordlistPath, "Path to wordlist file. If this is not specified an internal wordlist will be used.")
 	rootCmd.Flags().BoolVarP(&debug, "debug", "d", debug, "Enable debug logging.")
 	rootCmd.Flags().StringVarP(&filename, "filename", "f", filename, "Filename to seek in the directory being searched. Useful when all directories report 404 status.")
+	rootCmd.Flags().BoolVarP(&skipSSLVerification, "skip-ssl-verify", "k", skipSSLVerification, "Skip SSL certificate verification.")
 
 	if err := rootCmd.Execute(); err != nil {
 		fmt.Println(err)

pkg/scan/options.go

@@ -20,6 +20,7 @@ type Options struct {
 	Wordlist            wordlist.Wordlist
 	Extensions          []string
 	Filename            string
+	SkipSSLVerification bool
 }
 
 type Result struct {

pkg/scan/scanner.go

@@ -1,6 +1,7 @@
 package scan
 
 import (
+	"crypto/tls"
 	"io"
 	"io/ioutil"
 	"net/http"
@@ -24,11 +25,17 @@ func NewScanner(opt *Options) *Scanner {
 
 	opt.Inherit()
 
+	client := &http.Client{
+		Timeout: opt.Timeout,
+	}
+
+	if opt.SkipSSLVerification {
+		client.Transport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+	}
+
 	return &Scanner{
 		options: opt,
-		client: &http.Client{
-			Timeout: opt.Timeout,
-		},
+		client:  client,
 	}
 }