GitHub - guelfoweb/knock: Knock Subdomain Scan

一个 Python 的子域扫描程序

Knock Subdomain Scan - 图1

使用

  1. usage: knockpy [-h] [-v] [--no-local] [--no-remote] [--no-scan] [--no-http] 
  2.                [--no-http-code CODE [CODE ...]] [--dns DNS] [-w WORDLIST] 
  3.                [-o FOLDER] [-t SEC] [-th NUM] [--silent [{False,json,json-pretty,csv}]]
  4.                domain
  6. --------------------------------------------------------------------------------
  7. * SCAN
  8. full scan:    knockpy domain.com
  9. quick scan:   knockpy domain.com --no-local
  10. faster scan:  knockpy domain.com --no-local --no-http
  11. ignore code:  knockpy domain.com --no-http-code 404 500 530
  12. silent mode:  knockpy domain.com --silent
  14. * SUBDOMAINS
  15. show recon:   knockpy domain.com --no-local --no-scan
  17. * REPORT
  18. show report:  knockpy --report knockpy_report/domain.com_yyyy_mm_dd_hh_mm_ss.json
  19. plot report:  knockpy --plot knockpy_report/domain.com_yyyy_mm_dd_hh_mm_ss.json
  20. csv report:   knockpy --csv knockpy_report/domain.com_yyyy_mm_dd_hh_mm_ss.json
  21. --------------------------------------------------------------------------------
  23. positional arguments:
  24.   domain                target to scan
  26. optional arguments:
  27.   -h, --help            show this help message and exit
  28.   -v, --version         show program's version number and exit
  29.   --no-local            local wordlist ignore
  30.   --no-remote           remote wordlist ignore
  31.   --no-scan             scanning ignore, show wordlist and exit
  32.   --no-http             http requests ignore
  34.   --no-http-code CODE [CODE ...]
  35.                         http code list to ignore
  37.   --dns DNS             use custom DNS ex. 8.8.8.8                        
  39.   -w WORDLIST           wordlist file to import
  40.   -o FOLDER             report folder to store json results
  41.   -t SEC                timeout in seconds
  42.   -th NUM               threads num
  44.   --silent [{False,json,json-pretty,csv}]
  45.                         silent or quiet mode, default: False

Full scan

  1. $ knockpy domain.com