Information gathering & website reconnaissance
Features:
- IP and hosting info like city and country (using FreegeoIP)
- DNS servers (using dig)
- ASN, Network range, ISP name (using RISwhois)
- Load balancer test
- Whois for abuse mail (using Spamcop)
- PAC (Proxy Auto Configuration) file
- Compares hashes to diff code
- robots.txt (recursively looking for hidden stuff)
- Source code (looking for passwords and users)
- External links (frames from other websites)
- Directory FUZZ (like Dirbuster and Wfuzz - using Dirbuster) directory list)
- URLvoid API - checks Google page rank, Alexa rank and possible blacklists
- Provides useful links at other websites to correlate with IP/ASN
- Option to open ALL results in browser at the end
Requirements: Tested on Kali light mini AND OSX 10.11.3 with brew
sudo apt-get install bc curl dnsutils libxml2-utils whois md5sha1sum -y
Todo list:
- Upload to github :)
- Integration with other APIs
- Add host regex validation
- Use GNU parallel to fuzz URLs
- Export to CSV
- Possible migration to python
- Integration with JoomScan/WPScan/CMSmap
- Integration with CipherScan
- Check for installed packages
How to install :
Download tool : https://goo.gl/kBXv1D
Posts
