Bug Bounty - GitBook

کسی با فیلم آموزش شنا، شنا یاد نمیگیره (: اینم جمله انگیزشی جادی

اینم جمله انگیزشی جادی، برای امروز🥰

سلام به همگی در صورتی که با پلتفرم هکروان کار می کنید، این مقاله رو از دست ندید. https://dollarisho.com/hackerone-registeration-and-safty

???

🔴Replace subdomains.txt with the filename of your subdomains list.

#!/bin/bash

go install -v github.com/tomnomnom/anew@latest
subdomain_list="subdomains.txt"

for sub in $( ( cat $subdomain_list | rev | cut -d '.' -f 3,2,1 | rev | sort | uniq -c | sort -nr | grep -v '1 ' | head -n 10 && cat subdomains.txt | rev | cut -d '.' -f 4,3,2,1 | rev | sort | uniq -c | sort -nr | grep -v '1 ' | head -n 10 ) | sed -e 's/^[[:space:]]*//' | cut -d ' ' -f 2);do 
    subfinder -d $sub -silent -max-time 2 | anew -q passive_recursive.txt
    assetfinder --subs-only $sub | anew -q passive_recursive.txt
    amass enum -timeout 2 -passive -d $sub | anew -q passive_recursive.txt
    findomain --quiet -t $sub | anew -q passive_recursive.txt
done

🔖Subdomain Enumeration - Recursive 💡Note:

This technique is only useful when your target has a large number of multi-level subdomains(not effective for small & medium scope targets). Execute this technique as the final step.

🧑‍💻Workflow: 🔴Step-1

Read the list of subdomains from the file "subdomains.txt".

🔴Step-2

Process the subdomains in two steps: a) Find the Top-10 most frequent occuring Second-Level Domain names with the help of tools like cut, sort, rev, uniq, etc. b) Find the Top-10 most frequent occuring Third-Level domains.

🔴Step-3

Now run passive subdomain enumeration on these 10 Second-level domain names and 10 Third-level domain names using tools like amass, subfinder, assetfinder, findomain.

🔴Step-4

Keep appending the results to passive_recursive.txt file.

🔴Step-5

Now after finding out the a list of domain names, run puredns to DNS resolve them and find the alive subdomains. Replace subdomains.txt with the filename of your subdomains list.

👇🏻Check the Example Script on the next post.

Encoding، Encryption و Hashing