From d8546cbe1fa0357119555cf700a70bf2dc0a2c46 Mon Sep 17 00:00:00 2001 From: Jing Ling Date: Wed, 13 May 2020 18:41:29 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/usage_example.svg | 219 ++++++++++++++++++----------------------- 1 file changed, 98 insertions(+), 121 deletions(-) diff --git a/docs/usage_example.svg b/docs/usage_example.svg index 38003e2..c01ca84 100644 --- a/docs/usage_example.svg +++ b/docs/usage_example.svg @@ -1,7 +1,7 @@ - + - + - - root@kali:~# root@kali:~# c root@kali:~# cd root@kali:~# cd root@kali:~# cd O root@kali:~# cd OneForAll/ root@kali:~# cd OneForAll/o root@kali:~# cd OneForAll/oneforall/ root@kali:~# cd OneForAll/oneforall/root@kali:~/OneForAll/oneforall# root@kali:~/OneForAll/oneforall# p root@kali:~/OneForAll/oneforall# py root@kali:~/OneForAll/oneforall# pyt root@kali:~/OneForAll/oneforall# pyth root@kali:~/OneForAll/oneforall# python root@kali:~/OneForAll/oneforall# python3 root@kali:~/OneForAll/oneforall# python3 root@kali:~/OneForAll/oneforall# python3 o root@kali:~/OneForAll/oneforall# python3 on root@kali:~/OneForAll/oneforall# python3 one root@kali:~/OneForAll/oneforall# python3 oneforall.py root@kali:~/OneForAll/oneforall# python3 oneforall.py - root@kali:~/OneForAll/oneforall# python3 oneforall.py -- root@kali:~/OneForAll/oneforall# python3 oneforall.py --t root@kali:~/OneForAll/oneforall# python3 oneforall.py --ta root@kali:~/OneForAll/oneforall# python3 oneforall.py --tar root@kali:~/OneForAll/oneforall# python3 oneforall.py --targ root@kali:~/OneForAll/oneforall# python3 oneforall.py --targe root@kali:~/OneForAll/oneforall# python3 oneforall.py --target root@kali:~/OneForAll/oneforall# python3 oneforall.py --target root@kali:~/OneForAll/oneforall# python3 oneforall.py --target e root@kali:~/OneForAll/oneforall# python3 oneforall.py --target ex root@kali:~/OneForAll/oneforall# python3 oneforall.py --target exa root@kali:~/OneForAll/oneforall# python3 oneforall.py --target exam root@kali:~/OneForAll/oneforall# python3 oneforall.py --target examp root@kali:~/OneForAll/oneforall# python3 oneforall.py --target exampl root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example. root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.c root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.co root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.com root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.com root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.com r root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.com ru root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.com run root@kali:~/OneForAll/oneforall# python3 oneforall.py --target example.com run ___ _ _ ___ ___ ___| _|___ ___ ___| | | {v0.0.2#dev}| . | | -_| _| . | _| .'| | | |___|_|_|___|_| |___|_| |__,|_|_| git.io/fjHT1 [*] Starting OneForAll @ 2019-08-03 17:49:2817:49:28,838 [INFOR] oneforall:72 - 开始运行OneForAll17:49:28,838 [INFOR] utils:100 - 正在获取域名17:49:28,839 [INFOR] utils:113 - 获取到1个域名17:49:28,839 [INFOR] collect:58 - 开始收集example.com的子域17:49:28,869 [INFOR] module:53 - CirclAPIQuery模块耗时0.0秒发现子域0个17:49:29,264 [ALERT] module:72 - GET http://example.com/crossdomain.xml 404 - Not Found 127017:49:29,281 [INFOR] module:53 - Content-Security-Policy模块耗时0.4秒发现子域0个17:49:29,285 [INFOR] module:53 - ThreatBookAPIQuery模块耗时0.4秒发现子域0个17:49:29,293 [INFOR] module:53 - CrossDomainXml模块耗时0.4秒发现子域0个17:49:29,297 [INFOR] module:53 - BruteSRV模块耗时0.4秒发现子域0个17:49:29,462 [INFOR] module:53 - CertInfo模块耗时0.6秒发现子域2个17:49:29,751 [ALERT] module:72 - GET https://www.dnsdb.org/example.com/ 503 - Service Temporarily Unavailable 1094917:49:29,756 [INFOR] module:53 - DNSdbQuery模块耗时0.9秒发现子域0个17:49:29,940 [INFOR] module:53 - AXFRCheck模块耗时1.1秒发现子域0个17:49:29,949 [INFOR] module:53 - HackerTargetQuery模块耗时1.1秒发现子域2个17:49:30,205 [ALERT] module:72 - GET https://api.shodan.io/shodan/host/search?key=oCiMsgM6rQWqiTvPxFHYcExlZgg7wvTt&page=1&query=hostname%3A.example.com&minify=True&facets=hostnames 401 - Unauthorized 35717:49:30,236 [INFOR] module:53 - ChinazQuery模块耗时1.4秒发现子域4个17:49:30,281 [ALERT] module:72 - GET https://fofa.so/api/v1/search/all?email=bit4woo%40163.com&key=4c428ccbf09eeb05590ab842f24c45dd&qbase64=ZG9tYWluPWV4YW1wbGUuY29t&page=1 401 - Unauthorized 10617:49:30,282 [ALERT] module:76 - {'error': True, 'errmsg': '401 Unauthorized, make sure 1.email and apikey is correct 2.FOFA coin is enough.'}17:49:30,314 [INFOR] module:53 - VirusTotalAPIQuery模块耗时1.4秒发现子域100个17:49:30,557 [INFOR] module:53 - RiskIQQuery模块耗时1.7秒发现子域97个17:49:30,740 [INFOR] module:53 - GoogleQuery模块耗时1.9秒发现子域3个17:49:30,756 [ALERT] module:72 - GET https://dns.bufferover.run/dns?q=example.com 503 - Service Temporarily Unavailable 896617:49:30,760 [INFOR] module:53 - BufferOverQuery模块耗时1.9秒发现子域0个17:49:30,772 [INFOR] module:53 - ChinazAPIQuery模块耗时1.9秒发现子域3个17:49:30,887 [INFOR] module:53 - CertSpotterQuery模块耗时2.0秒发现子域2个17:49:30,958 [INFOR] module:53 - ThreatMinerQuery模块耗时2.1秒发现子域22个17:49:30,966 [ALERT] module:72 - GET https://api.dnsdb.info/lookup/rrset/name/*.example.com 403 - forbidden 1917:49:30,970 [INFOR] module:53 - DNSdbAPIQuery模块耗时2.1秒发现子域0个17:49:31,007 [INFOR] module:53 - EntrustQuery模块耗时2.2秒发现子域2个17:49:31,075 [INFOR] module:53 - CrtshQuery模块耗时2.2秒发现子域6个17:49:31,289 [INFOR] module:53 - PTRArchiveQuery模块耗时2.4秒发现子域327个17:49:31,367 [INFOR] module:53 - RiddlerQuery模块耗时2.5秒发现子域10个17:49:32,098 [INFOR] module:53 - NetCraftQuery模块耗时3.2秒发现子域1个17:49:32,237 [INFOR] module:53 - SecurityTrailsQuery模块耗时3.4秒发现子域319个17:49:32,493 [INFOR] module:53 - BinaryEdgeAPIQuery模块耗时3.6秒发现子域101个17:49:34,728 [ALERT] module:72 - GET https://api.zoomeye.org/web/search?query=hostname%3Aexample.com&page=2 403 - Forbidden 13917:49:34,729 [ALERT] module:76 - {'error': 'forbidden', 'message': 'provided credentials do not provide access to specified resource', 'url': 'https://www.zoomeye.org/api'}17:49:35,530 [INFOR] module:53 - VirusTotalQuery模块耗时6.6秒发现子域100个17:49:35,596 [INFOR] module:53 - RobtexQuery模块耗时6.7秒发现子域2个17:49:35,854 [ALERT] module:72 - GET https://api.spyse.com/v1/subdomains?domain=example.com&api_token=eOwDuIRlAFgutHeL-MpZ2RDQJxftAuoM&page=2 500 - Internal Server Error 17817:49:35,854 [ALERT] module:76 - {'name': 'Internal Server Error', 'message': 'Internal server error. We are aware of the error and are already working on fixing it. Sorry for inconvenience.', 'code': 0, 'status': 500}17:49:35,859 [INFOR] module:53 - CertDBQuery模块耗时7.0秒发现子域30个17:49:39,379 [ALERT] module:72 - GET http://www.sitedossier.com/audit/?15308 403 - forbidden 6117:49:39,385 [INFOR] module:53 - SiteDossierQuery模块耗时10.5秒发现子域0个17:49:42,797 [INFOR] module:53 - DNSdumpsterQuery模块耗时13.9秒发现子域2个17:49:58,195 [INFOR] resolve:76 - 正在异步查询子域的A记录17:49:59,393 [INFOR] resolve:87 - 完成异步查询子域的A记录17:49:59,395 [INFOR] request:95 - 正在异步进行子域的GET请求17:49:59,396 [INFOR] request:15 - 正在获取请求端口范围17:49:59,398 [INFOR] request:24 - 使用medium等端口范围17:49:59,399 [INFOR] request:32 - 正在生成请求地址17:49:59,407 [INFOR] request:114 - 完成异步进行子域的GET请求17:49:59,680 [INFOR] dbexport:47 - 正在将数据库中example_com表导出17:49:59,687 [INFOR] dbexport:56 - 成功完成导出17:49:59,688 [INFOR] dbexport:57 - /root/OneForAll/oneforall/results/example.com.xlsx17:49:59,688 [INFOR] oneforall:100 - 结束运行OneForAllroot@kali:~/OneForAll/oneforall# exit + + ------------------------------------------------------------ ~/SecurityTools/Discover/subDomain/OneForAll(master*) » jrd@JrDs-MBP ~/SecurityTools/Discover/subDomain/OneForAll(master*) » termtosvg jrd@JrDs-MBP ~/SecurityTools/Discover/subDomain/OneForAll(master*) » python3 oneforall.py --target example.com run jrd@JrDs-MBP ~/SecurityTools/Discover/subDomain/OneForAll(master*) » python3 oneforall.py --target example.com run jrd@JrDs-MBP OneForAll is a powerful subdomain integration tool ___ _ _ ___ ___ ___| _|___ ___ ___| | | {v0.3.0#dev}| . | | -_| _| . | _| .'| | | |___|_|_|___|_| |___|_| |__,|_|_| git.io/fjHT1OneForAll is under development, please update before each use![*] Starting OneForAll @ 2020-05-13 16:21:06 16:21:06,671 [INFOR] utils:534 - Checking the environment16:21:06,672 [INFOR] utils:490 - Checking Internet environment16:21:06,672 [INFOR] utils:496 - Trying to access http://www.linkedin.com16:21:08,024 [INFOR] utils:508 - Access to Internet OK16:21:08,025 [INFOR] utils:512 - Checking dependent environment16:21:08,034 [INFOR] oneforall:237 - Start running OneForAll16:21:08,037 [INFOR] utils:125 - Get 1 domains16:21:08,037 [INFOR] collect:58 - Start collecting subdomains of example.com16:21:08,312 [INFOR] module:65 - The QueryNS module took 0.0 seconds found 0 subdomains16:21:08,313 [INFOR] module:65 - The QuerySOA module took 0.0 seconds found 0 subdomains16:21:08,342 [INFOR] module:65 - The QueryTXT module took 0.1 seconds found 0 subdomains16:21:08,450 [INFOR] module:65 - The IP138Query module took 0.2 seconds found 144 subdomains16:21:08,486 [INFOR] module:65 - The QueryMX module took 0.2 seconds found 0 subdomains16:21:08,491 [INFOR] module:65 - The QuerySPF module took 0.2 seconds found 0 subdomains16:21:08,533 [INFOR] module:65 - The SogouSearch module took 0.2 seconds found 1 subdomains16:21:08,537 [INFOR] module:65 - The CheckNSEC module took 0.4 seconds found 2 subdomains16:21:08,558 [INFOR] module:65 - The CrossDomainXml module took 0.4 seconds found 0 subdomains16:21:08,563 [INFOR] module:65 - The Sitemap module took 0.5 seconds found 0 subdomains16:21:08,564 [INFOR] module:65 - The Robots module took 0.4 seconds found 0 subdomains16:21:08,567 [INFOR] module:65 - The ContentSecurityPolicy module took 0.5 seconds found 0 subdomains16:21:08,617 [INFOR] module:65 - The XimcxQuery module took 0.5 seconds found 1 subdomains16:21:08,721 [INFOR] module:65 - The CeBaiduQuery module took 0.5 seconds found 1 subdomains16:21:08,741 [INFOR] module:65 - The ChinazQuery module took 0.5 seconds found 3 subdomains16:21:08,753 [INFOR] module:65 - The CertInfo module took 0.6 seconds found 2 subdomains16:21:08,776 [INFOR] module:65 - The ThreatCrowdQuery module took 0.6 seconds found 148 subdomains16:21:08,836 [INFOR] module:65 - The ThreatMinerQuery module took 0.5 seconds found 22 subdomains16:21:09,106 [INFOR] module:65 - The Sublist3rQuery module took 0.9 seconds found 15076 subdomains16:21:09,672 [INFOR] module:65 - The QianXunQuery module took 1.0 seconds found 99 subdomains16:21:09,673 [INFOR] module:65 - The CertSpotterQuery module took 1.6 seconds found 2 subdomains16:21:09,673 [INFOR] module:65 - The BufferOverQuery module took 1.5 seconds found 15076 subdomains16:21:09,674 [INFOR] module:65 - The HackerTargetQuery module took 1.5 seconds found 2 subdomains16:21:09,749 [INFOR] module:65 - The AXFRCheck module took 1.6 seconds found 0 subdomains16:21:09,752 [INFOR] module:65 - The GoogleQuery module took 1.7 seconds found 2 subdomains16:21:09,949 [INFOR] module:65 - The RiddlerQuery module took 1.8 seconds found 10 subdomains16:21:09,974 [INFOR] module:65 - The CrtshQuery module took 1.9 seconds found 6 subdomains16:21:10,166 [INFOR] module:65 - The GoogleSearch module took 1.8 seconds found 1 subdomains16:21:10,474 [INFOR] module:65 - The WZPCQuery module took 2.3 seconds found 0 subdomains16:21:10,601 [INFOR] module:65 - The BingSearch module took 2.3 seconds found 1 subdomains16:21:10,612 [INFOR] module:65 - The BaiduSearch module took 2.3 seconds found 1 subdomains16:21:10,692 [INFOR] module:65 - The AskSearch module took 2.4 seconds found 1 subdomains16:21:10,950 [INFOR] module:65 - The VirusTotalQuery module took 2.7 seconds found 40 subdomains16:21:11,166 [INFOR] module:65 - The SiteDossierQuery module took 2.9 seconds found 0 subdomains16:21:11,240 [INFOR] module:65 - The BruteSRV module took 3.0 seconds found 0 subdomains16:21:11,544 [INFOR] module:65 - The GiteeSearch module took 3.2 seconds found 2 subdomains16:21:11,713 [INFOR] module:65 - The DNSdumpsterQuery module took 3.6 seconds found 1 subdomains16:21:11,846 [INFOR] module:65 - The SoSearch module took 3.5 seconds found 2 subdomains16:21:12,290 [INFOR] module:65 - The AlienVaultQuery module took 4.0 seconds found 484 subdomains16:21:12,639 [INFOR] module:65 - The NetCraftQuery module took 4.4 seconds found 2 subdomains16:21:12,816 [INFOR] module:65 - The YahooSearch module took 4.5 seconds found 1 subdomains16:21:14,458 [INFOR] module:65 - The RapidDNSQuery module took 6.3 seconds found 2 subdomains16:21:17,650 [INFOR] module:65 - The RobtexQuery module took 9.5 seconds found 2 subdomains16:21:25,512 [INFOR] module:65 - The YandexSearch module took 17.2 seconds found 1 subdomains16:21:26,165 [INFOR] resolve:140 - Start resolve subdomains of example.com16:21:26,193 [INFOR] resolve:164 - Running massdns to resolve subdomains16:21:30,650 [INFOR] resolve:72 - Processing resolved results16:21:30,844 [INFOR] resolve:170 - Finished resolve subdomains of example.com16:21:30,846 [INFOR] resolve:55 - Saving resolved results16:21:31,291 [INFOR] request:248 - Start subdomain request module16:21:31,296 [INFOR] request:38 - Port range:[80]16:21:31,299 [INFOR] request:43 - Generating request urls16:21:31,302 [INFOR] request:205 - Use GET method to requestRequest Progress: 0%| | 0/2 [00:00<?, ?it/s]16:21:31,303 [INFOR] request:206 - Async subdomains request in progressRequest Progress: 50%|█████████████▌ | 1/2 [00:00<00:00, 2.67it/s] Request Progress: 100%|███████████████████████████| 2/2 [00:00<00:00, 5.31it/s]16:21:31,942 [INFOR] request:258 - Request module found example.com have 2 alive subdomains16:21:32,347 [ALERT] utils:174 - The /Users/jrd/SecurityTools/Discover/subDomain/OneForAll/results/example.com.csv exists and will be overwritten16:21:32,840 [ALERT] dbexport:49 - The subdomain result for example.com: /Users/jrd/SecurityTools/Discover/subDomain/OneForAll/results/example.com.csv16:21:32,943 [ALERT] utils:292 - The subdomain result for all main domains: /Users/jrd/SecurityTools/Discover/subDomain/OneForAll/results/all_subdomain_result_20200513_162132.csv16:21:33,340 [ALERT] utils:311 - The txt subdomain result for all main domains: /Users/jrd/SecurityTools/Discover/subDomain/OneForAll/results/all_subdomain_result_20200513_162132.txt16:21:33,347 [INFOR] oneforall:246 - Finished OneForAll~/SecurityTools/Discover/subDomain/OneForAll(master*) » jrd@JrDs-MBP \ No newline at end of file