Skip to content

Commit

Permalink
Merge pull request SolomonSklash#16 from SolomonSklash/wayback
Browse files Browse the repository at this point in the history 
Added waybackurls.
  • Loading branch information
@SolomonSklash
SolomonSklash authored Mar 5, 2019
2 parents 779cd68 + 6669446 commit 902a45f
Show file tree
Hide file tree
Showing 3 changed files with 34 additions and 2 deletions.
1 change: 1 addition & 0 deletions README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,7 @@ Chomp Scan supports limited canceling/skipping of tools by pressing Ctrl-c. This

#### Content Discovery (optional) (4 different sized wordlists)
* [inception](https://github.com/proabiral/inception)
* [waybackurls](https://github.com/tomnomnom/waybackurls)
* [ffuf](https://github.com/ffuf/ffuf)
* [gobuster](https://github.com/OJ/gobuster)
* [dirsearch](https://github.com/maurosoria/dirsearch)
Expand Down
33 changes: 31 additions & 2 deletions chomp-scan.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,7 @@ NMAP=$(command -v nmap);
MASSCAN=$(command -v masscan);
NIKTO=$(command -v nikto);
INCEPTION=$(command -v inception);
WAYBACKURLS=$(command -v waybackurls);
SUBLIST3R=~/bounty/tools/Sublist3r/sublist3r.py;
DNSCAN=~/bounty/tools/dnscan/dnscan.py;
ALTDNS=~/bounty/tools/altdns/altdns.py;
Expand Down Expand Up @@ -1007,12 +1008,23 @@ function run_inception() {
fi
}

function run_waybackurls() {
# Call with domain as $1
echo -e "$GREEN""[i]$BLUE Running waybackurls against $DOMAIN.""$NC";
echo -e "$GREEN""[i]$BLUE Command: waybackurls $DOMAIN | tee $WORKING_DIR/waybackurls-output.txt""$NC";
# Run waybackurls
START=$(date +%s);
"$WAYBACKURLS" "$DOMAIN" | tee "$WORKING_DIR"/waybackurls-output.txt;
END=$(date +%s);
DIFF=$(( END - START ));
echo -e "$GREEN""[i]$BLUE Waybackurls took $DIFF seconds to run.""$NC";
}

function run_content_discovery() {
# Ask user to do directory bruteforcing on discovered domains
while true; do
echo -e "$GREEN""[?] Do you want to begin content bruteforcing on [A]ll/[I]nteresting/[N]o discovered domains?";
echo -e "$ORANGE""[i] This will run ffuf, gobuster, and dirsearch.";
echo -e "$ORANGE""[i] This will run inception, waybackurls, ffuf, gobuster, and dirsearch.";
read -rp "[?] Please enter A/a, I/i, or N/n. " ANSWER

case $ANSWER in
Expand All @@ -1029,34 +1041,39 @@ while true; do
case $CHOICE in
[sS]* )
run_inception "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
break;
;;
[mM]* )
run_inception "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$ALL_RESOLVED";
break;
;;
[lL]* )
run_inception "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$ALL_RESOLVED";
break;
;;
[xX]* )
run_inception "$DOMAIN" "$XL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$XL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$XL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$XL" "$WORKING_DIR"/"$ALL_RESOLVED";
break;
;;
[2]* )
run_inception "$DOMAIN" "$XXL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$XXL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$XXL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$XXL" "$WORKING_DIR"/"$ALL_RESOLVED";
Expand Down Expand Up @@ -1093,34 +1110,39 @@ while true; do
case $CHOICE in
[sS]* )
run_inception "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
break;
;;
[mM]* )
run_inception "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$MEDIUM" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
break;
;;
[lL]* )
run_inception "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$LARGE" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
break;
;;
[xX]* )
run_inception "$DOMAIN" "$XL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$XL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$XL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$XL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
break;
;;
[2]* )
run_inception "$DOMAIN" "$XXL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$XXL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$XXL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$XXL" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
Expand Down Expand Up @@ -1529,6 +1551,7 @@ if [[ "$DEFAULT_MODE" == 1 ]]; then
run_whatweb "$DOMAIN" "$WORKING_DIR"/"$ALL_RESOLVED";
run_wafw00f "$DOMAIN" "$WORKING_DIR"/"$ALL_RESOLVED";
run_inception "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
run_ffuf "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$SMALL" "$WORKING_DIR"/"$ALL_RESOLVED";
Expand Down Expand Up @@ -1649,7 +1672,7 @@ fi

# -C run content discovery
if [[ "$CONTENT_DISCOVERY" == 1 ]]; then
echo -e "$BLUE""[i] Beginning content discovery with ffuf, gobuster, and dirsearch.""$NC";
echo -e "$BLUE""[i] Beginning content discovery with inception, waybackurls, ffuf, gobuster, and dirsearch.""$NC";
sleep 0.5;

# Call unique to make sure list is up to date for content discovery
Expand All @@ -1659,19 +1682,22 @@ if [[ "$CONTENT_DISCOVERY" == 1 ]]; then
if [[ "$CONTENT_WORDLIST" != "" ]]; then
if [[ "$USE_ALL" == 1 ]]; then
run_inception "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
# run_snallygaster "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_ffuf "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
# Make sure there are interesting domains
elif [[ $(wc -l "$WORKING_DIR"/"$INTERESTING_DOMAINS" | cut -d ' ' -f 1) -gt 0 ]]; then
run_inception "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
# run_snallygaster "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_ffuf "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
else
run_inception "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
# run_snallygaster "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_ffuf "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$CONTENT_WORDLIST" "$WORKING_DIR"/"$ALL_RESOLVED";
Expand All @@ -1680,19 +1706,22 @@ if [[ "$CONTENT_DISCOVERY" == 1 ]]; then
else
if [[ "$USE_ALL" == 1 ]]; then
run_inception "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
# run_snallygaster "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_ffuf "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_dirsearch "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
# Make sure there are interesting domains
elif [[ $(wc -l "$WORKING_DIR"/"$INTERESTING_DOMAINS" | cut -d ' ' -f 1) != 0 ]]; then
run_inception "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_waybackurls "$DOMAIN";
# run_snallygaster "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_ffuf "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_gobuster "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
run_dirsearch "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$INTERESTING_DOMAINS";
else
run_inception "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_waybackurls "$DOMAIN";
# run_snallygaster "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_ffuf "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
run_gobuster "$DOMAIN" "$SHORT" "$WORKING_DIR"/"$ALL_RESOLVED";
Expand Down
2 changes: 2 additions & 0 deletions installer.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -122,6 +122,8 @@ function install_go_tools() {
go get github.com/OJ/gobuster;
echo -e "$GREEN""Installing inception from Github.""$NC";
go get github.com/proabiral/inception;
echo -e "$GREEN""Installing waybackurls from Github.""$NC";
go get github.com/tomnomnom/waybackurls;
}

function install_go() {
Expand Down

0 comments on commit 902a45f

Please sign in to comment.