OFFENSIVE | DEFENSIVE | WIKI | ABOUT

<<



AMASS
DESCRIPTION:

C1: amass enum -d URL
SAMPLE: amass enum -d machetevault.com
SAMPLE: amass enum -d machetevault.com > /path/to/file.txt
	
-d = domain
> = output content

.C1. 



WEB TOOLS
DESCRIPTION:

crt.sh 

NOTE:  Wildcard search on crt.sh, %.URL
SAMPLE: %.machetevault.com
	


SUBFINDER
DESCRIPTION:

C1: subfinder -d URL
SAMPLE: subfinder -d machetevault.com
SAMPLE: subfinder -d machetevault.com -o /path/to/file.txt
	
-d = domain
-o = output content

.C1. 



GOWITNESS
DESCRIPTION:

C1: gowitness file -f demo.txt -P folder/to/store --no-http
SAMPLE: gowitness file -f demo.txt -P /usr/store/ --no-http
	
--no-http = ignore HTTP requests
-P = folder to store images

.C1. 



SUBLIST3R
DESCRIPTION:

$ sublist3r -d URL
$ sublist3r -d machetevault.com

flags:

-d: domain
	


SHODAN
DESCRIPTION:

filters to enumerate more subdomains for a company. 
intigriti tweet / https://x.com/intigriti/status/1859902400682672337

ssl.cert.subject.CN:"machetevault.com" 
http.html:"©" 

http.favicon.hash:-1533858881 | for this one you need to find the hash favicon first.
intigriti tweet / https://x.com/intigriti/status/1844667511599497453	
	

GO BACK