64 lines
2.9 KiB
Plaintext
64 lines
2.9 KiB
Plaintext
# Docker
|
|
|
|
docker run -it --rm "dirsearch:v0.4.3" -u http://4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud -e php,html,js,zip
|
|
|
|
docker run -it projectdiscovery/subfinder -d scandella.fr -silent > scandella.fr__subfinder.txt
|
|
|
|
docker run -v $HOME/scandella.fr__subfinder.txt:/scandella.fr__subfinder.txt -it projectdiscovery/httpx -silent scandella.fr__subfinder.txt > scandella.fr__httpx.txt
|
|
|
|
docker run -v $HOME/scandella.fr__subfinder.txt:/scandella.fr__subfinder.txt -it projectdiscovery/httpx -silent -sc -title -td -method -bp -server -ip -location -cname -asn -probe -j -l scandella.fr__subfinder.txt > scandella.fr__httpx.json
|
|
|
|
touch scandella.fr__nuclei.json
|
|
|
|
docker run -v $HOME/scandella.fr__httpx.txt:/scandella.fr__httpx.txt -v $HOME/scandella.fr__nuclei.json:/scandella.fr__nuclei.json -it projectdiscovery/nuclei -l scandella.fr__httpx.txt -j -o scandella.fr__nuclei.json
|
|
|
|
cat scandella.fr__httpx.json | jq . > scandella.fr__httpx.json
|
|
|
|
cat scandella.fr__nuclei.json | jq . > scandella.fr__nuclei.json
|
|
|
|
|
|
|
|
|
|
# subfinder + httpx
|
|
|
|
echo hackerone.com | subfinder -silent | httpx -silent -sc -title -td -method -bp -server -ip -location -cname -asn -probe -j | jq . > hackerone.com__httpx.json
|
|
|
|
# nuclei
|
|
|
|
subfinder -d hackerone.com -silent | httpx
|
|
|
|
echo hackerone.com | subfinder -silent | httpx | nuclei -j | jq . > hackerone.com__nuclei.json
|
|
|
|
nuclei -u https://api.proxycrawl.com -j -o nuclei.json | jq . > hackerone.com__nuclei.json
|
|
|
|
echo hackerone.com | subfinder -silent | nuclei -j -o nuclei.json | jq . > hackerone.com__nuclei.json
|
|
|
|
|
|
# IVRE
|
|
|
|
|
|
installation :
|
|
yes | ivre ipinfo --init
|
|
yes | ivre scancli --init
|
|
yes | ivre view --init
|
|
yes | ivre flowcli --init
|
|
yes | ivre runscansagentdb --init
|
|
ivre ipdata --download
|
|
|
|
ivre runscans --routable --limit 1000
|
|
ivre runscans --network 10.10.10.10/24
|
|
|
|
usage: ivre runscans [-h] [--categories CAT [CAT ...]] [--country CODE[,CODE[,...]]] [--registered-country CODE[,CODE[,...]]] [--city COUNTRY_CODE CITY] [--region COUNTRY_CODE REGION_CODE]
|
|
[--asnum AS[,AS[,...]]] [--range START STOP] [--network NET/MASK] [--routable] [--file FILENAME] [--test COUNT] [--zmap-prescan-port ZMAP_PRESCAN_PORT]
|
|
[--zmap-prescan-opts ZMAP_PRESCAN_OPTS] [--nmap-prescan-ports NMAP_PRESCAN_PORTS [NMAP_PRESCAN_PORTS ...]] [--nmap-prescan-opts NMAP_PRESCAN_OPTS] [--limit LIMIT]
|
|
[--state STATE STATE STATE STATE] [--nmap-template {default}] [--output {XML,XMLFull,XMLFork,Test,Count,List,ListAll,ListAllRand,ListCIDRs,CommandLine,Agent}] [--processes COUNT]
|
|
[--nmap-max-cpu TIME] [--nmap-max-heap-size SIZE] [--nmap-max-stack-size SIZE] [--again {up,down,unknown,all} [{up,down,unknown,all} ...]]
|
|
|
|
https://doc.ivre.rocks/en/latest/index.html
|
|
|
|
ivre scan2db -c ROUTABLE-001 -s MySource -r scans/ROUTABLE/up
|
|
ivre db2view nmap
|
|
|
|
|
|
177 ivre scan2db -c nuclei2 -s nuclei2 -r nuclei.json
|
|
178 ivre db2view all |