---

NeutronSec

• NeutronSec is a Basic Tool which does most of our Recon Hassle.

• It Uses Mohd Shibli's recon scripts as its core component.

• It uses multiple bash scripts and executes them through python.

• It Also does some Post reconnaissance stuff.

• Consider using this Tool mostly for Medium/Large Scope Targets !

---

Features

• Gather Subdomains through Amass, subfinder and assetfinder.

• Gather JS files.

• Check For Any Reflected domain in response (Using Additional X-Header).

• Extract Endpoints with relative url extractor.

• Curate a Common wordlist for gathered enpoints.

• Perform Waybackurls and Gau.

• Grep gf patterns for XSS, SSRF, RCE, SQLi, etc.

• Find Open S3 Buckets using S3Scanner.py

• Perform Subdomain Takeover checks using Subjack.

• Perform Eyewitness for visual Recon.

• Perfom Nmap for port Scanning

• Finally perform Nuclei on Subdomains.

---

Dependencies :

• Golang / go

• Amass

• Subfinder

• AssetFinder

• httpx

• relative-url-extractor

• Waybackurls

• Gau

• gf

• gf-patterns

• S3Scanner

• Subjack

• Nuclei

• pip3 install eyewitness

• pip3 install coloredlogs

• pip3 install requests

• pip3 install awscli

---

Extras

• Here is Mohd Shibli's Github Repository

• To Run the script, Just use > python3 main.py and relax!

• Keep in mind that you need to write the Path for amass config file (If any) and for S3Scanner.py

Thank You

This Mini Project was developed by @Neutron__

If you are facing any problem getting things right, feel free to ping me :)

Future Updates

Possibility of Replacing Nmap with any other fast Port Scanner.

Active BruteForcing of Subdomains (Permutations) for VPS.

Adding more features like Checking SSTI, SSRF, etc.