simple-recon

Description

Tested on Debian 11.02 amd64

This script use various open source tools to perform reconnaissance on a given domain.

The tools used are:

1. subfinder
2. assetfinder
3. httprobe
4. getallurls (gau)
5. gospider
6. cloud_enum
7. github-subdomains
8. anew

You can also use my recon-tools script to automatically install required tools.

Usage

You need to run this script as root.

Change "script paths" section.

####################### setting up variables ########################

domainName=$1

# script paths

dir_cloud_enum=~/tools/cloud_enum
dir_assetfinder=~/tools/
export GITHUB_TOKEN=<github token here>

#####################################################################

Usage:

chmod +x install.sh;./install.sh <target-domain>