1. Host discovery (It check wheather the host is up or down.)
2. Firewall check (It check is there any Firewall and identify its signature.)
3. CMS Detection (Check which CMS is in use. If any)
4. DNS recon (Basically identify information related to DNS.)
5. Basic Info (Identify small and big informaton about target.)
6. Google Dorking (Perform google dorks to gather sensitve info.)
7. Github Dorking (Perform github dorking to gather sensitive info.)
8. Javascript Recon (Identify JS files and also try to extract words from it.)
9. Subdomain Enumeration (Gather many subdomains to increase attack surface.)
10. Active Subdomans (Filter the active and inactive subdomains.)
11. Network Scanning (Perform port scanning and service scanning.)
12. Subdomain Takeover (Check for subdomain takeover vulnerability.)
13. Directory Busting (Bruteforce the hidden directories and files.)
14. Grabing Parameters (It crawl the website and grab urls and parameters.)
15. Vulnerable Parameters (It filter the parameters according to the vulnerability testing.)
16. Bypass 403 (It try to bypass directories with 403 code.)
17. Vulnerability Scanning (It perform vulnerablity scanning on target.)
18. Test SQLI (It automate the SQL injaction.)
19. Test XSS (It automate the XSS tests.)
20. Test SSTI (It automate the SSTI vulnerability scan.)
21. Find Buckets (It scan for publically open buckets for target.)
For more information visit https://scriptjacker.in/research/recon
This tool will work when you are a root user.
sudo su
git clone https://github.com/scriptjacker/scriptjacker.git
cd scriptjacker
sudo su
chmod x scriptjacker.sh
chmod x install.sh
sudo su
./scriptjacker.sh -h
_______________(_)___ / /_ (_)___ ______/ /_____ _____
/ ___/ ___/ ___/ / __ \/ __/ / / __ `/ ___/ //_/ _ \/ ___/
(__ ) /__/ / / / /_/ / /_ / / /_/ / /__/ ,< / __/ /
/____/\___/_/ /_/ .___/\__/_/ /\__,_/\___/_/|_|\___/_/
/_/ /___/
v.1.0 Parth Narula
[ ] Argument: ./scriptjacker.sh -h, --help
FLAGS:
[-] -all Do full recon process. (take more time than other tasks.)
[-] -sub Do indepth subdomain enumeration and task related to it.
[-] -js Do Javascript recon and find words from it.
[-] -dns Do indepth DNS enumeration information related.
[-] -vp It take parameters/urls file and grep potentially vul param.
EXAMPLES:
[ ] Argument: ./scriptjacker.sh -all target.com
[ ] Argument: ./scriptjacker.sh -sub target.com
[ ] Argument: ./scriptjacker.sh -vp file.txt (Can enter full path like ../file.txt)
[ ] Argument: ./scriptjacker.sh -js target.com
This tool have parameters that will ask for several information.