{"id":1838,"date":"2021-04-11T19:51:38","date_gmt":"2021-04-11T19:51:38","guid":{"rendered":"https:\/\/dft.wiki\/?p=1838"},"modified":"2024-03-24T09:42:29","modified_gmt":"2024-03-24T13:42:29","slug":"hacking-tools-cheat-sheet-4","status":"publish","type":"post","link":"https:\/\/dft.wiki\/?p=1838","title":{"rendered":"Hacking Tools Cheat Sheet #4"},"content":{"rendered":"
Reference List<\/h5>\n
    \n
  1. \n
      \n
    1. MassDNS<\/a><\/li>\n
    2. ShuffleDNS<\/a><\/li>\n
    3. DNSProbe<\/a><\/li>\n
    4. Amass<\/a><\/li>\n
    5. Jok3r<\/a><\/li>\n
    6. Medusa<\/a><\/li>\n
    7. Ncrack<\/a><\/li>\n
    8. SubBrute<\/a><\/li>\n
    9. Steghide<\/a><\/li>\n
    10. StegCracker<\/a><\/li>\n
    11. Zsteg<\/a><\/li>\n
    12. Exiv2<\/a><\/li>\n
    13. Binwalk<\/a><\/li>\n
    14. oleVBA<\/a><\/li>\n
    15. MACchanger<\/a><\/li>\n
    16. DNScat2<\/a><\/li>\n
    17. Iodine<\/a><\/li>\n
    18. hping3<\/a><\/li>\n
    19. WhatWeb<\/a><\/li>\n
    20. NetDiscover<\/a><\/li>\n
    21. Zmap<\/a><\/li>\n
    22. Zgrab<\/a><\/li>\n
    23. ZDNS<\/a><\/li>\n
    24. Villain<\/a><\/li>\n
    25. dnsTwist<\/a><\/li>\n
    26. Ligolo-ng<\/a><\/li>\n
    27. Chisel<\/a><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
      \n

      MassDNS<\/strong> – A high-performance DNS stub resolver for massive amounts of domains [Link<\/a>]. In its repository, there is a file with one thousand DNS resolver IPs. See also Subjack: it scans a list of subdomains concurrently and identifies ones that are able to be hijacked [Link<\/a>].<\/p>\n

      sudo apt install massdns\r\nmassdns -r resolvers.lst -t A -w results.output domains.lst<\/pre>\n
      \n
      ShuffleDNS<\/strong> – It is a tool capable of brute-force domain resolve and handle wildcard subdomains [Link<\/a>].<\/p>\n
      GO111MODULE=on go get -v github.com\/projectdiscovery\/shuffledns\/cmd\/shuffledns\r\nwget https:\/\/github.com\/blechschmidt\/massdns\/blob\/master\/lists\/resolvers.txt\r\n~\/go\/bin\/shuffledns -h<\/pre>\n
      Subdomain Bruteforcing:<\/p>\n
      ~\/go\/bin\/shuffledns -d example.com -w wordlist.lst -r resolvers.txt -t 200<\/pre>\n
      To resolve a list of subdomains:<\/p>\n
      ~\/go\/bin\/shuffledns -d example.com -list subdomains.lst -r resolvers.txt\r\nsubfinder -d example.com -silent | ~\/go\/bin\/shuffledns -d example.com -r resolvers.txt<\/pre>\n
      \n
      DNSProbe<\/strong> – perform multiple DNS queries (A, AAAA, CNAME, TXT, MX) with list of resolvers [Link<\/a>].<\/p>\n
      GO111MODULE=on go get -v github.com\/projectdiscovery\/dnsprobe\r\nsubfinder -d example.com -silent | ~\/go\/bin\/dnsprobe -r cname<\/strong>\r\nsubfinder -d example.com -silent | ~\/go\/bin\/dnsprobe -r txt<\/strong>\r\nsubfinder -d example.com -silent | ~\/go\/bin\/dnsprobe -r mx<\/strong>\r\nsubfinder -d example.com -silent | ~\/go\/bin\/dnsprobe -r a<\/strong>\r\nsubfinder -d example.com -silent | ~\/go\/bin\/dnsprobe -r aaaa -silent<\/strong><\/pre>\n
      \n
      Amass<\/strong> – The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques [Link<\/a>].<\/p>\n
      FEATURES<\/p>\n