v1.12
- Add a new command
metabigor related
to dind more related domains of the target by applying various techniques (certificate, whois, Google Analytics, etc). - Add a new command
metabigor ip
to extract Shodan IPInfo from internetdb.shodan.io - Refactor and fix some bugs.
Finding more related domains of the target by applying various techniques (certificate, whois, Google Analytics, etc) - metabigor related
Note some of the results are not 100% accurate. Please do a manual check first before put it directly to other tools to scan.
Some specific technique require different input so please see the usage of each technique.
Using certificate to find related domains on crt.sh
# Getting more related domains by searching for certificate info
echo 'Target Inc' | metabigor cert --json | jq -r '.Domain' | unfurl format %r.%t | sort -u # this is old command
# Getting more related domains by searching for certificate info
echo 'example Inc' | metabigor related -s 'cert'
Using Reverse Whois to find related domains
echo 'example.com' | metabigor related -s 'whois'
Getting more related by searching for Google Analytics ID
# Get it directly from the URL
echo 'https://example.com' | metabigor related -s 'google-analytic'
# You can also search it directly from the UA ID too
metabigor related -s 'google-analytic' -i 'UA-9152XXX' --debug
Extract Shodan IPInfo from internetdb.shodan.io
echo '1.2.3.4' | metabigor ip -open
1.2.3.4:80
1.2.3.4:443
# lookup CIDR range
echo '1.2.3.4/24' | metabigor ip -open -c 20
1.2.3.4:80
1.2.3.5:80
# get raw JSON response
echo '1.2.3.4' | metabigor ip -json