Using {{domain}}
ReconNess replace {{domain}}
for the subdomain.
If we have the wordlist in ~/Desktop/tools/wordlist/directories.txt
ffuf -w ~/Desktop/tools/wordlist/directories.txt -u https://{{domain}}/FUZZ
​Click here to know more about ffuf​
This Agent run in each subdomain.
using ReconNess.Core.Models;​lineInput = lineInput.Replace("[2K","");var match = System.Text.RegularExpressions.Regex.Match(lineInput, @"(.*?)\[Status: (.*?), Size: (.*?),");if (match.Success && match.Groups.Count == 4){return new ScriptOutput{HttpDirectory = match.Groups[1].Value,HttpDirectoryMethod = "GET",HttpDirectoryStatusCode = match.Groups[2].Value,HttpDirectorySize = match.Groups[3].Value,};}return new ScriptOutput();
Check the Readme on GitHub to know more about the Script.
# -------- Agents dependencies --------​# To allow run ffuf inside the docker​RUN apt-get update && apt-get install -y git wgetRUN wget https://dl.google.com/go/go1.14.6.linux-amd64.tar.gzRUN tar -C /usr/local -xzf go1.14.6.linux-amd64.tar.gzRUN /usr/local/go/bin/go get github.com/ffuf/ffufRUN wget https://gist.githubusercontent.com/gorums/0a3a9d903e8e47fbff9d91097e19b4f8/raw/c81a34fe84731430741e0463eb6076129c20c4c0/content_discovery_all.txt​# -------- End Agents dependencies --------
/root/go/bin/ffuf -w /app/content_discovery_all.txt -u https://{{domain}}/FUZZ