sf

Automatic Reconnaisance in addition to Scanning inwards Penetration Testing What is Osmedeus? Osmedeus let yous to doing tedious materials inwards Pentesting automatically similar reconnaissance in addition to scanning the target past times run the collection of awesome tools. Installation git clone https://github.com/j3ssie/Osmedeus cd Osmedeus chmod +x install.sh ./install.sh How to use Doing normal routine include: Subdomain Scanning, Subdomain TakeOver Scanning, Port Scanning in addition to ScreenShot the target. ./osmedeus.py -t example.com Scanning subdomain in addition to Subdomain TakeOver ./osmedeus.py -m subdomain -t example.com Git repo scanning ./osmedeus.py -m git --git https://github.com/whatever/repo Doing around materials amongst Burp State file ./osmedeus.py -m burp -t example.com --burp yourburpstate.xml Available modules amongst listing tool existence used Subdomain Scanning amass subfinder massdns Subdomain TakeOver Scann...

theHarvester is a tool for gathering subdomain names, electronic mail addresses, virtual hosts, opened upward ports/ banners, too employee names from unlike world sources (search engines, pgp fundamental servers). Is a actually uncomplicated tool, but really effective for the early on stages of a penetration examination or but to know the visibility of your companionship inward the Internet. The sources are: Passive : threatcrowd: Open source threat intelligence - https://www.threatcrowd.org/ crtsh: Comodo Certificate search - www.crt.sh google: google search engine - www.google.com (With optional google dorking) googleCSE: google custom search engine google-profiles: google search engine, specific search for Google profiles bing: microsoft search engine - www.bing.com bingapi: microsoft search engine, through the API (you require to add together your Key inward the discovery/bingsearch.py file) dogpile: Dogpile search engine - www.dogpile.com ...