skynet0x01 / tugarecon Goto Github PK

View Code? Open in Web Editor NEW

144.0 9.0 26.0 3.31 MB

Pentest: Subdomains enumeration tool for penetration testers.

Home Page: https://skynet0x01.github.io/tugarecon/

License: GNU General Public License v3.0

Python 100.00%

subdomain-scanner subdomain-enumeration hacking bugbounty bug-bounty pentest information-gathering recon scan scanner

tugarecon's Introduction

TugaRecon

                           ______                  ____
                          /_  __/_  ______ _____ _/ __ \___  _________  ____
                           / / / / / / __ `/ __ `/ /_/ / _ \/ ___/ __ \/ __ \
                          / / / /_/ / /_/ / /_/ / _, _/  __/ /__/ /_/ / / / /
                         /_/  \__,_/\__, /\__,_/_/ |_|\___/\___/\____/_/ /_/
                                   /____/    # Coded By skynet0x01 #

*** 03-05-2024 *** NEWS: Imagine that...

In less than 28 seconds, it can discover 15464 subdomains.

********** AVAILABLE SOON **********

Tugarecon is a python tool designed to enumerate subdomains using modules. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Bruteforce was integrated was a module to increase the possibility of finding more subdomains using bruteforce with an improved wordlist. TugaRecon, tribute to Portuguese explorers reminding glorious past of this country.

During the 15th and 16th centuries, Portuguese explorers were at the forefront of European overseas exploration, which led them to reach India, establish multiple trading posts in Asia and Africa, and settle what would become Brazil, creating one of the most powerful empires.

skynet0x01

Version

1.30

More modules will be added! And much more... :)

Screenshots

Installation

git clone https://github.com/skynet0x01/tugarecon.git
pip install -r requirements.txt

Usage

    python3 tugarecon.py -d google.com
    python3 tugarecon.py -d google.com --savemap
    python3 tugarecon.py -d google.com --bruteforce
    python3 tugarecon.py -d google.com --bruteforce --full
    python3 tugarecon.py -d google.com -b --full
    python3 tugarecon.py -r

Modules

bruteforce (tuga_bruteforce - wildcards, wordlist)
certspotter
ssl
hackertarget
threatcrowd
Alienvault
Threatminer
Omnisint
API Sublist3r

Dependencies

You need to install dnspython to do DNS query

    dnspython>=1.16.0
    argparse
    sys
    time
    datetime
    urllib3
    requests
    webbrowser
    os
    pathlib
    json
    threading
    re 
    queue
    whois
    progress

DONATIONS:

Donations are welcome. This will help improved features, frequent updates and better overall support.

BTC: 17EbiXrVAvAqgkyunPYPBdKKz2AFHmb7mZ
ETH: 0x642187e3f8F9CaF95d92df823D17E8020c50647E
LTC: LLsJVJibVFRqYjnxbUfhYFd4kSowcRHdcN
Doge: DPWbTMEaqTNzpfC5oYC1xcScT9dQBW17MW
ONE: one1q2y2hntw32yakh6fxk5ls7dkvswfuhcm70ymvh
SCRT: secret1fc88f5asq3lmkrhst2shsa7ew5fxt7qapjsda7

tugarecon's People

Contributors

Stargazers

Watchers

tugarecon's Issues

Error running normal scan

Hi could you please help me with this error?

Traceback (most recent call last):
File "tugarecon.py", line 190, in
menu()
File "tugarecon.py", line 186, in menu
main(target, output, savemap, enum, threads, bruteforce, args)
File "tugarecon.py", line 153, in main
enums = [indicate(target, output) for indicate in chosenEnums]
File "tugarecon.py", line 153, in
enums = [indicate(target, output) for indicate in chosenEnums]
File "/home/tugarecon/modules/tuga_virustotal.py", line 29, in init
self.enumerate(self.response, output, target)
File "/home/tugarecon/modules/tuga_virustotal.py", line 49, in enumerate
subdomains = response.json()["data"][subdomainscount]["id"]
KeyError: 'data'

Got error when running. bruteforce

python3 tugarecon.py -d google.com -b --full

         ______                  ____                      
        /_  __/_  ______ _____ _/ __ \___  _________  ____ 
         / / / / / / __ `/ __ `/ /_/ / _ \/ ___/ __ \/ __ \                
        / / / /_/ / /_/ / /_/ / _, _/  __/ /__/ /_/ / / / /               
       /_/  \__,_/\__, /\__,_/_/ |_|\___/\___/\____/_/ /_/  V: 0.45b               
                 /____/                                    

                    # Coded By LordNeoStark #

TugaRecon, tribute to Portuguese explorers reminding glorious past of this country

[+] DNS queries...

google.com. 5 IN A 172.217.168.238

google.com. 21 IN AAAA 2a00:1450:400e:807::200e

google.com. 595 IN MX 50 alt4.aspmx.l.google.com.
google.com. 595 IN MX 30 alt2.aspmx.l.google.com.
google.com. 595 IN MX 20 alt1.aspmx.l.google.com.
google.com. 595 IN MX 40 alt3.aspmx.l.google.com.
google.com. 595 IN MX 10 aspmx.l.google.com.

google.com. 29266 IN NS ns1.google.com.
google.com. 29266 IN NS ns4.google.com.
google.com. 29266 IN NS ns3.google.com.
google.com. 29266 IN NS ns2.google.com.

google.com. 300 IN TXT "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="
google.com. 300 IN TXT "docusign=1b0a6754-49b1-4db5-8540-d2c12664b289"
google.com. 300 IN TXT "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"
google.com. 300 IN TXT "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"
google.com. 300 IN TXT "v=spf1 include:_spf.google.com ~all"

google.com. 36 IN SOA ns1.google.com. dns-admin.google.com. 297077745 900 900 1800 60

Traceback (most recent call last):
File "tugarecon.py", line 177, in
menu()
File "tugarecon.py", line 173, in menu
main(target, output, savemap, enum, threads, bruteforce, args)
File "tugarecon.py", line 116, in main
d = TugaBruteScan(target, options=args)
File "/home/olivier/tools/tugarecon/tugascan.py", line 40, in init
self._dns_queries = _dns_queries(target)
File "/home/olivier/tools/tugarecon/lib/bscan.py", line 13, in _dns_queries
answer = dns.resolver.query(target, qtype, raise_on_no_answer=False)
File "/home/olivier/.local/lib/python3.6/site-packages/dns/resolver.py", line 1102, in query
lifetime)
File "/home/olivier/.local/lib/python3.6/site-packages/dns/resolver.py", line 898, in query
raise NoNameservers(request=request, errors=errors)
dns.resolver.NoNameservers: All nameservers failed to answer the query google.com. IN MINFO: Server 127.0.0.53 UDP port 53 answered NOTIMP
^[[A^CException ignored in: <module 'threading' from '/usr/lib/python3.6/threading.py'>
Traceback (most recent call last):
File "/usr/lib/python3.6/threading.py", line 1294, in _shutdown
t.join()
File "/usr/lib/python3.6/threading.py", line 1056, in join
self._wait_for_tstate_lock()
File "/usr/lib/python3.6/threading.py", line 1072, in _wait_for_tstate_lock
elif lock.acquire(block, timeout):

Option to save only subdomain

Can you add Option to save only subdomain name and stripe out ip address from output file?

savemap not creating png file

the savemap function does not create a PNG file