forked from ethicalhackingplayground/Bug-Bounty-Tools
-
Notifications
You must be signed in to change notification settings - Fork 0
/
autosploit.sh
54 lines (41 loc) · 2.13 KB
/
autosploit.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
#!/bin/bash
clear
echo -e "\e[1m"
echo -e "\e[94m"
echo -e """
________ __ __ _________ ______ ______ ______ __ ______ ________ _________
/_______/\ /_/\/_/\ /________/\/_____/\ /_____/\ /_____/\ /_/\ /_____/\ /_______/\/________/\
\::: _ \ \\:\ \:\ \\__.::.__\/\:::_ \ \\::::_\/_\:::_ \ \\:\ \ \:::_ \ \ \__.::._\/\__.::.__\/
\::(_) \ \\:\ \:\ \ \::\ \ \:\ \ \ \\:\/___/\\:(_) \ \\:\ \ \:\ \ \ \ \::\ \ \::\ \
\:: __ \ \\:\ \:\ \ \::\ \ \:\ \ \ \\_::._\:\\: ___\/ \:\ \____\:\ \ \ \ _\::\ \__ \::\ \
\:.\ \ \ \\:\_\:\ \ \::\ \ \:\_\ \ \ /____\:\\ \ \ \:\/___/\\:\_\ \ \/__\::\__/\ \::\ \
\__\/\__\/ \_____\/ \__\/ \_____\/ \_____\/ \_\/ \_____\/ \_____\/\________\/ \__\/
"""
cat *.out > all_subdomains.lst;
echo -e "\e[1m"
echo -e "\e[3m\e[91m Appending https:// to each subdomain.."
echo -e "\e[0m"
while read h;
do
echo "https://"$h >> subdomains.lst
done < all_subdomains.lst;
echo -e "\e[1m"
echo -e "\e[93m[+] Running XSS on all <subdomains>, Yeet!! "
echo -e "\e[0m"
xsser -i /root/Bug-Bounty-Tools/subdomains.lst --auto --reverse-check --Str --Coo --Xsa --Xsr --Ind --Anchor --Dcp --Dom -c 99999 --Cw=50 --delay=1 --save --Phpids0.6.5 --Phpids0.7 --Imperva --Webknight --F5bigip --Barracuda --Modsec --Quickdefense --heuristic --threads=10
echo -e "\e[1m"
echo -e "\e[93m[+] Running XSS on all <domains>, Yeet!! "
echo -e "\e[0m"
echo -e "\e[34m\e[5m\e[1mPlease Wait.."
echo -e "\e[0m"
xsser -i /root/Bug-Bounty-Tools/domains.txt --auto --reverse-check --Str --Coo --Xsa --Xsr --Ind --Anchor --Dcp --Dom -c 99999 --Cw=50 --delay=1 --save --Phpids0.6.5 --Phpids0.7 --Imperva --Webknight --F5bigip --Barracuda --Modsec --Quickdefense --heuristic --threads=10
echo -e "\e[1m"
echo -e "\e[93m"
echo -e "\e[0m"
echo -e "\e[1m"
echo -e "\e[3m\e[93m[+] Finding Subdomain takeovers.."
cd /root/go/src/github.com/Ice3man543/SubOver
go run subover.go -l /root/Bug-Bounty-Tools/all_subdomains.lst -timeout 5 -o subover.out;
echo -e "\e[1m"
echo -e "\e[93m"
cat subover.out