Objective: To provide a comprehensive, automated reconnaissance methodology for web application hacking that combines Python and Bash scripts. By the end, you will have a script where entering a domain will automatically perform all the necessary reconnaissance.
Introduction
In web application security testing, reconnaissance is a critical phase where you gather information about the target. Automating this process ensures efficiency and thoroughness. This guide provides scripts and instructions to automate recon tasks using Python and Bash.
Prerequisites
- Operating System: Linux-based OS (e.g., Kali Linux, Parrot OS)
- Tools and Libraries:
nmap
Sublist3r
assetfinder
amass
subfinder
httprobe
gowitness
oraquatone
dirsearch
ffuf
nikto
nuclei
getJS
waybackurls