-
subs take list of domains and produces
- results/target/subdomains/subfinder.txt
- results/target/subdomains/subdomains-combined.txt
-
resolver takes subdomains/subdomains-combined.txt and produces
- results/target/subdomains/subdomains-resolvable.txt
- results/target/resolver/cnames.txt
- results/target/resolver/ips.txt
-
probeNtakeover takes subdomains-resolvable.txt and produces
- results/target/weburls.txt
- results/target/takeover/subjack.txt
- results/target/takeover/subover.txt
-
jsmagic takes results/target/weburls.txt and produces
- results/target/javascript
- results/target/javascript/http_example_com/*.js
- results/target/javascript/http_example_com/javascript_urls.txt
-
endpoints takes results/target/weburls.txt and produces
- results/target/javascript/endpoints.txt
- Also produce results/target/stko/ folder - burl input for checking second level takeover
-
dirfuzz takes results/target/weburls.txt and produces
- results/target/dirfuzz
- results/target/dirfuzz/backupFiles.txt
- results/target/dirfuzz/http_domain_com_endpoints.txt
- results/target/dirfuzz/http_example_com_content.txt
-
favfreak takes results/target/weburls.txt and produces
- results/target/favfreak.txt
- This file contains all the technology found using favicon hashes