diff --git a/.deepsource.toml b/.deepsource.toml new file mode 100644 index 0000000..1f05ea0 --- /dev/null +++ b/.deepsource.toml @@ -0,0 +1,5 @@ +version = 1 + +[[analyzers]] +name = "shell" +enabled = true \ No newline at end of file diff --git a/lazyrecon.sh b/lazyrecon.sh index 9abcef5..4f99fd1 100755 --- a/lazyrecon.sh +++ b/lazyrecon.sh @@ -79,13 +79,13 @@ cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | unfurl --uni cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.js(\?|$)" | sort -u > ./$domain/$foldername/wayback-data/jsurls.txt [ -s ./$domain/$foldername/wayback-data/jsurls.txt ] && echo "JS Urls saved to /$domain/$foldername/wayback-data/jsurls.txt" -cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.php(\?|$) | sort -u " > ./$domain/$foldername/wayback-data/phpurls.txt +cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.php(\?|$)" | sort -u > ./$domain/$foldername/wayback-data/phpurls.txt [ -s ./$domain/$foldername/wayback-data/phpurls.txt ] && echo "PHP Urls saved to /$domain/$foldername/wayback-data/phpurls.txt" -cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.aspx(\?|$) | sort -u " > ./$domain/$foldername/wayback-data/aspxurls.txt +cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.aspx(\?|$)" | sort -u > ./$domain/$foldername/wayback-data/aspxurls.txt [ -s ./$domain/$foldername/wayback-data/aspxurls.txt ] && echo "ASP Urls saved to /$domain/$foldername/wayback-data/aspxurls.txt" -cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.jsp(\?|$) | sort -u " > ./$domain/$foldername/wayback-data/jspurls.txt +cat ./$domain/$foldername/wayback-data/waybackurls.txt | sort -u | grep -P "\w+\.jsp(\?|$)" | sort -u > ./$domain/$foldername/wayback-data/jspurls.txt [ -s ./$domain/$foldername/wayback-data/jspurls.txt ] && echo "JSP Urls saved to /$domain/$foldername/wayback-data/jspurls.txt" } @@ -113,7 +113,8 @@ recon(){ echo "Listing subdomains using sublister..." python ~/tools/Sublist3r/sublist3r.py -d $domain -t 10 -v -o ./$domain/$foldername/$domain.txt > /dev/null echo "Checking certspotter..." - curl -s https://certspotter.com/api/v0/certs\?domain\=$domain | jq '.[].dns_names[]' | sed 's/\"//g' | sed 's/\*\.//g' | sort -u | grep $domain >> ./$domain/$foldername/$domain.txt + # certspotter api v1 curl req added + curl -s https://api.certspotter.com/v1/issuances\?domain=$domain\&expand=dns_names\&expand=issuer\&expand=cert | jq '.[].dns_names[]' | sed 's/\"//g' | sed 's/\*\.//g' | sort -u | grep $domain >> ./$domain/$foldername/$domain.txt nsrecords $domain excludedomains echo "Starting discovery..."