Script designed to automate the installation and configuration of tools for subdomain enumeration, endpoint resolution, URL crawling, fuzzing, and security testing automation.
- System update and installation of essential dependencies;
- Installation and configurations of programming languages (Python & Golang) and tools.
python: A high-level programming language, interpreted, scripting, imperative, object-oriented, functional, dynamically and strongly typed;golang: A compiled language focused on productivity and concurrent programming.
unzip: ZIP file extraction;tar: TAR file manipulation (compression and extraction);bzip2: BZIP2 file manipulation (compression and extraction);vim: An advanced text editor;curl: A Data transfer tool via URL;git: a Distributed version control system;net-tools: A suite of network tools (includesnetstat);python3-pip: A package manager for Python3;python3-venv: A tool to create Python virtual environments;jq: A command-line JSON processor;nmap: A network scanner;
assetfinder: Finds subdomains related to a target domain;subfinder: Enumerates subdomains, focused on different data sources;anew: Filters and maintains text lists without duplicates;amass: A tool for open-source intelligence gathering, including subdomains;findomain: A tool to find subdomains.
httpx: A multi-purpose tool for probing web servers and identifying status codes;httprobe: Checks if a list of hosts responds to the desired HTTP(S);gowitness: A tool for taking screenshots of websites and storing them;dnsx: A flexible tool for performing DNS queries.
waybackurls: Fetches URLs from the Wayback Machine for a domain;gau: Fetches URLs from various sources of web indexers.
gf: Generates custom patterns forgrepand other filters.
subjs: Finds JavaScript files in a list of URLs;anti-burl: Filters based on HTTP 200 responses.
gobuster: A tool for brute-forcing directories and files;ffuf: A web fuzzing tool (finding files and directories).
nuclei: A framework for performing automated vulnerability checks.
Goop: A CVE search tool;meg: Extracts information and data from texts;freq: Identifies string and character frequencies;sdlookup: Extracts subdomain information;sigurlfind3r: Extracts URLs from files and text;airixss: Identifies vulnerable XSS parameters;nilo: Filters based on HTTP 200 responses;- Automatic template updates (e.g., Nuclei).
⚠️ Warning: Ensure the user has administrative permissions on the system.
Clone this repository:
git clone https://github.com/brennocm/basic-enum-tools.gitNavigate to the project directory:
cd basic-enum-toolsRun the script using the bash utility with administrative permissions:
sudo bash basic-enum-tools.shMake the script executable:
chmod +x basic-enum-tools.shRun the script with administrative permissions:
sudo ./basic-enum-tools.sh