Skip to content

Commit b7dd4b6

Browse files
committed
code cleaning && bug fixed
1 parent 69c2e3b commit b7dd4b6

27 files changed

+484991
-29
lines changed

arsenal/Bheem.sh

100644100755
File mode changed.

arsenal/autoxss.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,4 @@
22

33
dir=~/Recon/$1
44

5-
~/go/bin/dalfox -b hahwul.xss.ht file $dir/$1_params > $dir/$1_xss;
5+
dalfox -b hahwul.xss.ht file $dir/$1_params > $dir/$1_xss;

arsenal/bleed.sh

100644100755
File mode changed.

arsenal/corser.sh

100644100755
+2-2
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22

33
dir=~/Recon/$1
44

5-
python ~/Tools/CORScanner/cors_scan.py -i $dir/$1_probed -t 200 > $dir/$1_cors;
6-
5+
#python ~/Tools/CORScanner/cors_scan.py -i $dir/$1_probed -t 200 > $dir/$1_cors;
6+
corscanner -i $dir/$1_probed -t 200 > $dir/$1_cors;

arsenal/dirfuzz.sh

100644100755
File mode changed.

arsenal/extractor.sh

100644100755
+2-2
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22

33
dir=~/Recon/$1
44

5-
~/go/bin/waybackurls $1 > $dir/$1_extraction;
6-
~/go/bin/gau $1 >> $dir/$1_extraction; cat $dir/$1_extraction | sort -u > $dir/$1_archive_extracts;
5+
waybackurls $1 > $dir/$1_extraction;
6+
gau $1 >> $dir/$1_extraction; cat $dir/$1_extraction | sort -u > $dir/$1_archive_extracts;

arsenal/faver.sh

100644100755
File mode changed.

arsenal/gitter.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
#!/bin/sh
22
dir=~/Recon/$1
3-
cat $dir/$1_probed | ~/go/bin/githound --dig-files --dig-commits > $dir/$1_gitrecon
3+
cat $dir/$1_probed | git-hound --dig-files --dig-commits > $dir/$1_gitrecon
44

arsenal/jscan.sh

100644100755
+4-4
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
#!/bin/sh
22
dir=~/Recon/$1
33

4-
echo $1| ~/go/bin/gau | grep -iE "\.js$" | uniq | sort >> $dir/$1_jsfile_links;
5-
echo $1 | ~/go/bin/subjs >> $dir/$1_jsfile_links;
6-
echo $1 | ~/go/bin/hakrawler -js -depth 2 -scope subs -plain >> $dir/$1_jsfile_links;
4+
echo $1 | gau | grep -iE "\.js$" | uniq | sort >> $dir/$1_jsfile_links;
5+
echo $1 | subjs >> $dir/$1_jsfile_links;
6+
echo $1 | hakrawler -js -depth 2 -scope subs -plain >> $dir/$1_jsfile_links;
77

8-
cat $dir/$1_jsfile_links | ~/go/bin/httpx -follow-redirects -silent -status-code | grep "[200]" | cut -d ' ' -f1 | sort -u > $dir/$1_live_jsfile_links;
8+
cat $dir/$1_jsfile_links | httpx -follow-redirects -silent -status-code | grep "[200]" | cut -d ' ' -f1 | sort -u > $dir/$1_live_jsfile_links;
99

1010
python3 ~/Tools/LinkFinder/linkfinder.py -d -i $1 -o cli >> $dir/$1_JSEndpoints;
1111

arsenal/large.sh

100644100755
File mode changed.

arsenal/medium.sh

100644100755
File mode changed.

arsenal/nuclear.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22

33
dir=~/Recon/$1
44

5-
cat $dir/$1_probed | ~/go/bin/nuclei -c 500 -silent -t ~/Tools/nuclei-templates/ -o $dir/$1_nuclei;
5+
cat $dir/$1_probed | nuclei -c 500 -silent -t ~/nuclei-templates/ -o $dir/$1_nuclei;
66

arsenal/parameter.sh

100644100755
File mode changed.

arsenal/params_loop.sh

100644100755
File mode changed.

arsenal/pattern.sh

100644100755
+8-8
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
#!/bin/sh
22
dir=~/Recon/$1
33

4-
~/go/bin/gf xss $dir/$1_archive_extracts | cut -d : -f3- | sort -u > $dir/$1_xss;
5-
~/go/bin/gf ssti $dir/$1_archive_extracts | sort -u > $dir/$1_ssti;
6-
~/go/bin/gf ssrf $dir/$1_archive_extracts | sort -u > $dir/$1_ssrf;
7-
~/go/bin/gf sqli $dir/$1_archive_extracts | sort -u > $dir/$1_sqli;
8-
~/go/bin/gf redirect $dir/$1_archive_extracts | cut -d : -f3- | sort -u > $dir/$1_redirect;
9-
~/go/bin/gf rce $dir/$1_archive_extracts | sort -u > $dir/$1_rce;
10-
~/go/bin/gf potential $dir/$1_archive_extracts| cut -d : -f3- | sort -u > $dir/$1_potential;
11-
~/go/bin/gf lfi $dir/$1_archive_extracts | sort -u > $dir/$1_lfi;
4+
gf xss $dir/$1_archive_extracts | cut -d : -f3- | sort -u > $dir/$1_xss;
5+
gf ssti $dir/$1_archive_extracts | sort -u > $dir/$1_ssti;
6+
gf ssrf $dir/$1_archive_extracts | sort -u > $dir/$1_ssrf;
7+
gf sqli $dir/$1_archive_extracts | sort -u > $dir/$1_sqli;
8+
gf redirect $dir/$1_archive_extracts | cut -d : -f3- | sort -u > $dir/$1_redirect;
9+
gf rce $dir/$1_archive_extracts | sort -u > $dir/$1_rce;
10+
gf potential $dir/$1_archive_extracts| cut -d : -f3- | sort -u > $dir/$1_potential;
11+
gf lfi $dir/$1_archive_extracts | sort -u > $dir/$1_lfi;

arsenal/portscan.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22

33
dir=~/Recon/$1
44

5-
~/go/bin/naabu -iL $dir/$1_subdomains > $dir/$1_portscan;
5+
naabu -iL $dir/$1_subdomains > $dir/$1_portscan;
66

arsenal/portscan_single.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22

33
dir=~/Recon/$1
44

5-
~/go/bin/naabu $1 > $dir/$1_portscan;
5+
naabu $1 > $dir/$1_portscan;
66

arsenal/probe_single.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,4 @@
33
dir=~/Recon/$1
44
mkdir $dir
55

6-
echo $1 | ~/go/bin/httpx -follow-redirects -status-code -vhost -threads 300 -silent | sort -u | grep "[200]" | cut -d [ -f1 | sort -u | sed 's/[[:blank:]]*$//' >> $dir/$1_probed;
6+
echo $1 | httpx -follow-redirects -status-code -vhost -threads 300 -silent | sort -u | grep "[200]" | cut -d [ -f1 | sort -u | sed 's/[[:blank:]]*$//' >> $dir/$1_probed;

arsenal/prober.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22

33
dir=~/Recon/$1
44

5-
cat $dir/$1_subdomains | ~/go/bin/httpx -follow-redirects -status-code -vhost -threads 300 -silent | sort -u | grep "[200]" | cut -d [ -f1 | sort -u | sed 's/[[:blank:]]*$//' >> $dir/$1_probed
5+
cat $dir/$1_subdomains | httpx -follow-redirects -status-code -vhost -threads 300 -silent | sort -u | grep "[200]" | cut -d [ -f1 | sort -u | sed 's/[[:blank:]]*$//' >> $dir/$1_probed
66

arsenal/providers.json

+258
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,258 @@
1+
[
2+
{
3+
"name":"github",
4+
"cname":["github.io", "github.map.fastly.net"],
5+
"response":["There isn't a GitHub Pages site here.", "For root URLs (like http://example.com/) you must provide an index.html file"]
6+
},
7+
{
8+
"name":"heroku",
9+
"cname":["herokudns.com", "herokussl.com", "herokuapp.com"],
10+
"response":["There's nothing here, yet.", "herokucdn.com/error-pages/no-such-app.html", "<title>No such app</title>"]
11+
},
12+
{
13+
"name":"unbounce",
14+
"cname":["unbouncepages.com"],
15+
"response":["The requested URL / was not found on this server.", "The requested URL was not found on this server"]
16+
},
17+
{
18+
"name":"tumblr",
19+
"cname":["tumblr.com"],
20+
"response":["There's nothing here.", "Whatever you were looking for doesn't currently exist at this address."]
21+
},
22+
{
23+
"name":"shopify",
24+
"cname":["myshopify.com"],
25+
"response":["Sorry, this shop is currently unavailable.", "Only one step left!"]
26+
},
27+
{
28+
"name":"instapage",
29+
"cname":["pageserve.co", "secure.pageserve.co", "https://instapage.com/"],
30+
"response":["You've Discovered A Missing Link. Our Apologies!"]
31+
},
32+
{
33+
"name":"desk",
34+
"cname":["desk.com"],
35+
"response":["Please try again or try Desk.com free for 14 days.", "Sorry, We Couldn't Find That Page"]
36+
},
37+
{
38+
"name":"tictail",
39+
"cname":["tictail.com", "domains.tictail.com"],
40+
"response":["Building a brand of your own?", "to target URL: <a href=\"https://tictail.com", "Start selling on Tictail."]
41+
},
42+
{
43+
"name":"campaignmonitor",
44+
"cname":["createsend.com", "name.createsend.com"],
45+
"response":["Double check the URL", "<strong>Trying to access your account?</strong>"]
46+
},
47+
{
48+
"name":"cargocollective",
49+
"cname":["cargocollective.com"],
50+
"response":["404 Not Found"]
51+
},
52+
{
53+
"name":"statuspage",
54+
"cname":["statuspage.io"],
55+
"response":["Better Status Communication", "You are being <a href=\"https://www.statuspage.io\">redirected"]
56+
},
57+
{
58+
"name":"amazonaws",
59+
"cname":["amazonaws.com"],
60+
"response":["NoSuchBucket", "The specified bucket does not exist"]
61+
},
62+
{
63+
"name":"cloudfront",
64+
"cname":["cloudfront.net"],
65+
"response":["The request could not be satisfied", "ERROR: The request could not be satisfied"]
66+
},
67+
{
68+
"name":"bitbucket",
69+
"cname":["bitbucket.org"],
70+
"response":["The page you have requested does not exist"]
71+
},
72+
{
73+
"name":"smartling",
74+
"cname":["smartling.com"],
75+
"response":["Domain is not configured"]
76+
},
77+
{
78+
"name":"acquia",
79+
"cname":["acquia.com"],
80+
"response":["If you are an Acquia Cloud customer and expect to see your site at this address"]
81+
},
82+
{
83+
"name":"fastly",
84+
"cname":["fastly.net"],
85+
"response":["Please check that this domain has been added to a service", "Fastly error: unknown domain"]
86+
},
87+
{
88+
"name":"pantheon",
89+
"cname":["pantheonsite.io"],
90+
"response":["The gods are wise", "The gods are wise, but do not know of the site which you seek."]
91+
},
92+
{
93+
"name":"zendesk",
94+
"cname":["zendesk.com"],
95+
"response":["<title>Help Center Closed | Zendesk</title>", "Help Center Closed"]
96+
},
97+
{
98+
"name":"uservoice",
99+
"cname":["uservoice.com"],
100+
"response":["This UserVoice subdomain is currently available!"]
101+
},
102+
{
103+
"name":"ghost",
104+
"cname":["ghost.io"],
105+
"response":["The thing you were looking for is no longer here", "The thing you were looking for is no longer here, or never was"]
106+
},
107+
{
108+
"name":"pingdom",
109+
"cname":["stats.pingdom.com"],
110+
"response":["pingdom"]
111+
},
112+
{
113+
"name":"tilda",
114+
"cname":["tilda.ws"],
115+
"response":["Domain has been assigned"]
116+
},
117+
{
118+
"name":"wordpress",
119+
"cname":["wordpress.com"],
120+
"response":["Do you want to register"]
121+
},
122+
{
123+
"name":"teamwork",
124+
"cname":["teamwork.com"],
125+
"response":["Oops - We didn't find your site."]
126+
},
127+
{
128+
"name":"helpjuice",
129+
"cname":["helpjuice.com"],
130+
"response":["We could not find what you're looking for."]
131+
},
132+
{
133+
"name":"helpscout",
134+
"cname":["helpscoutdocs.com"],
135+
"response":["No settings were found for this company:"]
136+
},
137+
{
138+
"name":"cargo",
139+
"cname":["cargocollective.com"],
140+
"response":["If you're moving your domain away from Cargo you must make this configuration through your registrar's DNS control panel."]
141+
},
142+
{
143+
"name":"feedpress",
144+
"cname":["redirect.feedpress.me"],
145+
"response":["The feed has not been found."]
146+
},
147+
{
148+
"name":"surge",
149+
"cname":["surge.sh"],
150+
"response":["project not found"]
151+
},
152+
{
153+
"name":"surveygizmo",
154+
"cname":["privatedomain.sgizmo.com", "privatedomain.surveygizmo.eu", "privatedomain.sgizmoca.com"],
155+
"response":["data-html-name"]
156+
},
157+
{
158+
"name":"mashery",
159+
"cname":["mashery.com"],
160+
"response":["Unrecognized domain <strong>"]
161+
},
162+
{
163+
"name":"intercom",
164+
"cname":["custom.intercom.help"],
165+
"response":["This page is reserved for artistic dogs.","<h1 class=\"headline\">Uh oh. That page doesn’t exist.</h1>"]
166+
},
167+
{
168+
"name":"webflow",
169+
"cname":["proxy.webflow.io"],
170+
"response":["<p class=\"description\">The page you are looking for doesn't exist or has been moved.</p>"]
171+
},
172+
{
173+
"name":"kajabi",
174+
"cname":["endpoint.mykajabi.com"],
175+
"response":["<h1>The page you were looking for doesn't exist.</h1>"]
176+
},
177+
{
178+
"name":"thinkific",
179+
"cname":["thinkific.com"],
180+
"response":["You may have mistyped the address or the page may have moved."]
181+
},
182+
{
183+
"name":"tave",
184+
"cname":["clientaccess.tave.com"],
185+
"response":["<h1>Error 404: Page Not Found</h1>"]
186+
},
187+
{
188+
"name":"wishpond",
189+
"cname":["wishpond.com"],
190+
"response":["https://www.wishpond.com/404?campaign=true"]
191+
},
192+
{
193+
"name":"aftership",
194+
"cname":["aftership.com"],
195+
"response":["Oops.</h2><p class=\"text-muted text-tight\">The page you're looking for doesn't exist."]
196+
},
197+
{
198+
"name":"aha",
199+
"cname":["ideas.aha.io"],
200+
"response":["There is no portal here ... sending you back to Aha!"]
201+
},
202+
{
203+
"name":"brightcove",
204+
"cname":["brightcovegallery.com", "gallery.video", "bcvp0rtal.com"],
205+
"response":["<p class=\"bc-gallery-error-code\">Error Code: 404</p>"]
206+
},
207+
{
208+
"name":"bigcartel",
209+
"cname":["bigcartel.com"],
210+
"response":["<h1>Oops! We couldn&#8217;t find that page.</h1>"]
211+
},
212+
{
213+
"name":"activecompaign",
214+
"cname":["activehosted.com"],
215+
"response":["alt=\"LIGHTTPD - fly light.\""]
216+
},
217+
{
218+
"name":"compaignmonitor",
219+
"cname":["createsend.com"],
220+
"response":["Double check the URL or <a href=\"mailto:[email protected]"]
221+
},
222+
{
223+
"name":"acquia",
224+
"cname":["acquia-test.co"],
225+
"response":["The site you are looking for could not be found."]
226+
},
227+
{
228+
"name":"proposify",
229+
"cname":["proposify.biz"],
230+
"response":["If you need immediate assistance, please contact <a href=\"mailto:[email protected]"]
231+
},
232+
{
233+
"name":"simplebooklet",
234+
"cname":["simplebooklet.com"],
235+
"response":["We can't find this <a href=\"https://simplebooklet.com"]
236+
},
237+
{
238+
"name":"getresponse",
239+
"cname":[".gr8.com"],
240+
"response":["With GetResponse Landing Pages, lead generation has never been easier"]
241+
},
242+
{
243+
"name":"vend",
244+
"cname":["vendecommerce.com"],
245+
"response":["Looks like you've traveled too far into cyberspace."]
246+
},
247+
{
248+
"name":"jetbrains",
249+
"cname":["myjetbrains.com"],
250+
"response":["is not a registered InCloud YouTrack."]
251+
},
252+
{
253+
"name":"azure",
254+
"cname":["azurewebsites.net"],
255+
"response":["404 Web Site not found"]
256+
}
257+
]
258+

arsenal/secrets.sh

100644100755
+1
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,6 @@
33
dir=~/Recon/$1
44

55
cat $dir/$1_probed | xargs -I %% bash -c 'python3 ~/Tools/SecretFinder/SecretFinder.py -i %% -e -o cli' > $dir/$1_secretfinder;
6+
#interlace -tL $dir/$1_probed -threads 5 -c "python3 ~/Tools/SecretFinder/SecretFinder.py -i _target_ -o cli >> $dir/$1_secretfinder" -v
67
cat $dir/$1_secretfinder | grep 'google_api' -B 1 | sort -u > $dir/$1_gmapapi;
78

arsenal/small.sh

100644100755
File mode changed.

arsenal/subbruter.sh

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
dir=~/Recon/$1
44

5-
echo $1 | ~/go/bin/shuffledns -w ~/go/bin/subdomains.txt -r ~/arsenal/resolvers.txt -v -silent -o $1_brute;
5+
echo $1 | shuffledns -w ~/arsenal/subdomains.txt -r ~/arsenal/resolvers.txt -v -o $1_brute;
66
mv $1_brute $dir/$1_brute;
77
cat $dir/$1_brute >> $dir/$1_unfilter_subdomains;
88
cat $dir/$1_unfilter_subdomains | sort -u > $dir/$1_subdomains;

arsenal/subdomain.sh

100644100755
+2-2
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@
33
dir=~/Recon/$1
44
mkdir -p $dir
55

6-
~/go/bin/subfinder -d $1 > $dir/$1_unfilter_subdomains;
7-
~/go/bin/assetfinder --subs-only $1 >> $dir/$1_unfilter_subdomains;
6+
subfinder -d $1 > $dir/$1_unfilter_subdomains;
7+
assetfinder --subs-only $1 >> $dir/$1_unfilter_subdomains;
88
#amass enum -d $1 >> $dir/$1_unfilter_subdomains;
99
cat $dir/$1_unfilter_subdomains | sort -u > $dir/$1_subdomains;
1010

0 commit comments

Comments
 (0)