├── intro.gif ├── title.jpg ├── README.md └── s1mr3c /intro.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xarun/s1mr3c/HEAD/intro.gif -------------------------------------------------------------------------------- /title.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xarun/s1mr3c/HEAD/title.jpg -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # s1mr3c 2 | 3 | ![](intro.gif) 4 | Simple Recon Tool Just here automates your fav tools set. this my first try :) so avoid if anything wrong! 5 | 6 | # Installation 7 | 8 | Must have this tools in /usr/local/bin with all permissions. 9 | 10 | 1. [subfinder](https://github.com/projectdiscovery/subfinder) 11 | 2. [httprobe](https://github.com/tomnomnom/httprobe) 12 | 3. [aquatone](https://github.com/michenriksen/aquatone) 13 | 4. [subzy](https://github.com/LukaSikic/subzy) 14 | 5. [Waybackurls](https://github.com/tomnomnom/waybackurls) 15 | 6. [gf](https://github.com/tomnomnom/gf) 16 | 7. [Gf-Patterns](https://github.com/1ndianl33t/Gf-Patterns) 17 | 8. [sqlmap](https://github.com/sqlmapproject/sqlmap) 18 | 7. [qsrepalce](https://github.com/tomnomnom/qsreplace) 19 | 8. [gobuster](https://github.com/OJ/gobuster) 20 | 21 | # Important 22 | 23 | Easy to install those tools or else may you get any errors while this install this tools let use my Drive link download the zip file extract then copy those tools to save /usr/local/bin 24 | 25 | https://drive.google.com/file/d/1QMqixoF05vVHurR3veG9tVmMZXtHJsgQ/view?usp=sharing 26 | 27 | **Note** 28 | Dont forget to add Gf-Patterns 29 | 30 | ```bash 31 | git clone https://github.com/1ndianl33t/Gf-Patterns.git 32 | cd Gf-Patterns 33 | mkdir ~/.gf 34 | mv *.json ~/.gf 35 | gf -list 36 | ``` 37 | 38 | if sqlmap takes time you can stop it crtl + c then Namp starts! 39 | 40 | Get any error like "unable to locate chorme" with aquatone just install chrome browser! 41 | 42 | can you easily modify the code as well as run your's fav tool. 43 | 44 | 45 | # Usage 46 | 47 | git clone https://github.com/arundhanush-r/s1mr3c.git 48 | 49 | cd s1mr3c 50 | 51 | chmod +X s1mr3c 52 | 53 | ./s1mr3c example.com 54 | 55 | # Thank all 56 | :) 57 | [Twitter](https://twitter.com/0xarun) 58 | [Instagram](https://instagram.com/0xarun) 59 | 60 | -------------------------------------------------------------------------------- /s1mr3c: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | echo -e "\e[1;36m ___ ______ \e[0m" 4 | echo -e "\e[1;36m / |\_/| ___ / \e[0m" 5 | echo -e "\e[1;36m \ /| | | /| \ |\ | \e[0m" 6 | echo -e "\e[1;36m__/ | | | | ____/ | \| \e[0m" 7 | echo -e "\e[1;33m simply by <3 @0xarun\e[0m" 8 | 9 | if [ $# -gt 2 ]; 10 | then 11 | echo "Usage ./s1mr3c " 12 | echo "Example: ./s1mr3c google.com" 13 | exit 1 14 | fi 15 | 16 | mkdir $1 17 | mkdir $1/wayback-all 18 | mkdir $1/nmap-all 19 | cd $1 20 | 21 | echo "" 22 | echo "" 23 | echo -e "\e[1;34mStarting Subdomains Enumerations \e[0m" 24 | echo "" 25 | subfinder --silent -d $1 | sort -u | tee all.txt #you can change this as your peference as your fav tool! 26 | echo "" 27 | echo -e "\e[1;32m---------------Completed! Saved as all.txt------------------\e[0m" 28 | echo "" 29 | sleep 3 30 | 31 | echo -e "\e[1;34mStarting to filter live Domains \e[0m" 32 | echo "" 33 | cat all.txt | httprobe -s -p https:443 | sort -u | grep $1 | sed 's/https\?:\/\///' | tr -d ":443" | tee alive.txt 34 | chmod +X alive.txt 35 | echo "" 36 | echo -e "\e[1;32m---------------Completed! Saved as alive.txt------------------\e[0m" 37 | echo "" 38 | 39 | echo -e "\e[1;34mStarting Aquatone for Webscreenshots \e[0m" 40 | echo "" 41 | cat alive.txt | aquatone -out Aquatone-all 42 | echo "" 43 | echo -e "\e[1;32m---------------Completed! Saved as Aquatone-all.txt------------------\e[0m" 44 | 45 | 46 | echo "" 47 | echo -e "\e[1;34mChecking for vlun Subdomains \e[0m" 48 | echo "" 49 | subzy -targets all.txt -hide_fails | tee subsdomainvlun.txt 50 | echo "" 51 | echo -e "\e[1;33mWARNING: In txt file only shows vlun domains or else nothing there that case you can check Manually!\e[0m" 52 | echo "" 53 | echo -e "\e[1;32m---------------Completed! Saved as subsdomainvlun.txt------------------\e[0m" 54 | echo "" 55 | 56 | echo -e "\e[1;33mNow Starting Wayabackrls and Waybackurls realted Enumerations! \e[0m" 57 | sleep 2 58 | echo "" 59 | echo -e "\e[1;34mStart running Waybackurls \e[0m" 60 | echo "" 61 | waybackurls $1 | sort -u | tee wayback-all/waybackurls.txt | wc -l 62 | echo " " 63 | echo "How many numbers of urls found shown above!" 64 | echo -e "\e[1;32m---------------Completed! Saved as waybackurls.txt------------------\e[0m" 65 | sleep 3 66 | 67 | echo "" 68 | echo -e "\e[1;34mEnum for JS from waybackurls! \e[0m" 69 | echo "" 70 | cat wayback-all/waybackurls.txt | grep js | tee wayback-all/wayback-js.txt | wc -l 71 | echo "Numaber of JS files found shown above" 72 | echo -e "\e[1;32m---------------Completed! Saved as wayback-js.txt------------------\e[0m" 73 | 74 | echo "" 75 | echo -e "\e[1;34mEnum for Parameter from waybackurls! \e[0m" 76 | cat wayback-all/waybackurls.txt | grep "=" | tee wayback-all/wayback-params.txt | wc -l 77 | echo "Number of params found shown above!" 78 | echo -e "\e[1;32m---------------Completed! Saved as wayback-params.txt------------------\e[0m" 79 | echo "" 80 | 81 | echo -e "\e[1;34mEnum for SSRF from waybackurls! \e[0m" 82 | cat wayback-all/waybackurls.txt | gf ssrf | tee wayback-all/wayback-ssrf.txt | wc -l 83 | echo "Number of ssrf found shown above!" 84 | echo -e "\e[1;32m---------------Completed! Saved as wayback-ssrf.txt------------------\e[0m" 85 | echo "" 86 | 87 | echo "" 88 | echo -e "\e[1;34mEnum for SQLI from waybackurls! \e[0m" 89 | cat wayback-all/waybackurls.txt | gf sqli | tee wayback-all/wayback-sqli.txt | wc -l 90 | echo "Number of ssrf found shown above!" 91 | echo -e "\e[1;32m---------------Completed! Saved as wayback-sqli.txt------------------\e[0m" 92 | echo "" 93 | 94 | 95 | echo -e "\e[1;34mEnum for IDORS from waybackurls! \e[0m" 96 | cat wayback-all/waybackurls.txt | gf idor | tee wayback-all/wayback-idor.txt | wc -l 97 | echo "Number of ssrf found shown above!" 98 | echo -e "\e[1;32m---------------Completed! Saved as wayback-idors.txt------------------\e[0m" 99 | echo "" 100 | 101 | echo -e "\e[1;34mEnum for XSS from waybackurls! \e[0m" 102 | cat wayback-all/waybackurls.txt | grep "=" | qsreplace '"' |tee wayback-all/wayback-xss.txt | wc -l 103 | echo "Number of ssrf found shown above!" 104 | echo -e "\e[1;32m---------------Completed! Saved as wayback-xss.txt------------------\e[0m" 105 | 106 | echo "" 107 | echo -e "\e[1;34mEnum for Redirect from waybackurls! \e[0m" 108 | cat wayback-all/waybackurls.txt | gf redirect | tee wayback-all/wayback-redirect.txt | wc -l 109 | echo "How many links realeted to rediret shown above!" 110 | echo -e "\e[1;32m---------------Completed! Saved as wayback-redirect.txt------------------\e[0m" 111 | 112 | echo "" 113 | echo -e "\e[1;34mTesting for sqlinjection urls from wayback-sqli.txt \e[0m" 114 | sqlmap -m wayback-all/wayback-sqli.txt --dbs --batch | tee sql-test-result.txt 115 | echo -e "\e[1;32m---------------Completed! Saved as sql-test-result.txt.txt------------------\e[0m" 116 | 117 | echo "" 118 | echo -e "\e[1;33mWARNING: Now nmap Starting you can stop it coz this takes lot time! \e[0m" 119 | sleep 5 120 | 121 | 122 | echo "" 123 | echo -e "\e[1;34mScanning Live Ports \e[0m" 124 | nmap -iL alive.txt T5 -oG nmap-all/scans.txt 125 | echo "" 126 | echo -e "\e[1;32m---------------Completed! Saved to nmap-all------------------\e[0m" 127 | 128 | echo "" 129 | echo -e "\e[1;33mWARNING: Now Gobuster Starting you can stop it coz this takes lot time! \e[0m" 130 | sleep 5 131 | 132 | echo "" 133 | echo -e "\e[1;34mStarting Gobuster to find Dirs \e[0m" 134 | echo "Starting Gobuster" 135 | cat alive.txt | while read -r url; do gobuster dir -u $url -w /usr/share/wordlists/dirb/common.txt; done | tee dirs.txt 136 | echo "" 137 | echo -e "\e[1;32m---------------Completed! Saved as dirs.txt------------------\e[0m" 138 | echo "" 139 | --------------------------------------------------------------------------------