- argparse
- json
- requests
- sublist3r
- dns.resolver
- whois
- subprocess
- geoip2.database
Installing the Libraries:
pip install <module_name> ./Basic_Recon.py [FLAGS]Flags:
INPUT:
-d domain
-nd out of scope domains
-I ip_address
OUTPUT:
-o output file
HELP:
-h help./intermediate_recon.py [FLAGS]Flags:
INPUT:
-d domain
-nd out_of_scope_domains
-I IP_Address
-c Fetch subdomains from crtsh
-s Fetch subdomains using sublist3r
-dns Fetch dns info
-w Use whois to fetch domain info
-hthe Fetch http headers
-sf Fetch Static Files
-g Fetch geo_ip info
-wweb Use whatweb for technology detection
-sh Use shodan to discover open ports and services
-e Use theHarvester to fetch emails
OUTPUT:
-o Output File
HELP:
-h Help (Display this image)
