ovenspy

A powerful cookie crawler that visits websites and collects all cookies including third-party and tracking cookies. The tool supports various output formats and provides extensive configuration options.

Features

• Complete Cookie Collection: Collects all cookies including third-party and tracking cookies
• Multiple Output Formats: Console, CSV, JSON, and TOML output
• Configurable Crawling: Control depth, click limits, and allowed paths
• Headless/GUI Mode: Run in headless mode or with visible browser

Installation

go install github.com/mucahitkurtlar/ovenspy@latest

Or build from source:

git clone https://github.com/mucahitkurtlar/ovenspy.git
cd ovenspy
go build -o ovenspy .

Usage

Basic Usage

# Crawl a website and display cookies in console
ovenspy --website https://example.com

# Crawl with custom settings
ovenspy --website https://example.com --depth 3 --clicks 20 --output json

Command Line Options

  -w, --website string      Website to crawl (required)
  -p, --paths string        Comma-separated list of paths to visit
  -d, --depth int           Maximum crawling depth (default 2)
  -c, --clicks int          Maximum number of items to click per page (default 10)
  -o, --output string       Output format (console, csv, json, toml) (default "console")
  -f, --filename string     Output filename (optional, uses default if not specified)
      --headless            Run browser in headless mode (default true)
  -h, --help                help for ovenspy

Examples

# Crawl specific paths with JSON output
ovenspy -w https://example.com -p "/api,/login" -o json

# Crawl with visible browser and save to custom file
ovenspy -w https://example.com --headless=false -o csv -f my-cookies.csv

# Deep crawl with many clicks
ovenspy -w https://example.com -d 5 -c 50 -o toml

# Quick crawl with console output
ovenspy -w https://example.com -d 1 -c 5

Output Formats

Console

Human-readable output directly to the terminal.

CSV

Spreadsheet-compatible format with columns:

• Name, Value, Domain, Path, Expires, HttpOnly, Secure

JSON

Machine-readable JSON array of cookie objects.

TOML

Configuration-friendly TOML format.

Browser Compatibility

The crawler uses Chrome DevTools Protocol and requires Chrome or Chromium to be installed. It works with:

• Google Chrome
• Chromium
• Ungoogled Chromium
• Microsoft Edge (Chromium-based)

Note

Third-party cookies may be blocked by default in some browsers. Ensure your browser settings allow third-party cookies for complete collection.

Privacy and Ethics

This tool is designed for:

• Security research and analysis
• Privacy auditing
• Cookie compliance testing
• Educational purposes

Please ensure you have permission to crawl websites and comply with robots.txt and terms of service.

License

See LICENSE for details.