Skip to content
Compare
Choose a tag to compare

v1.12

@j3ssie j3ssie released this
· 3 commits to master since this release
Compare
Choose a tag to compare
  • Add a new command metabigor related to dind more related domains of the target by applying various techniques (certificate, whois, Google Analytics, etc).
  • Add a new command metabigor ip to extract Shodan IPInfo from internetdb.shodan.io
  • Refactor and fix some bugs.

Finding more related domains of the target by applying various techniques (certificate, whois, Google Analytics, etc) - metabigor related

Note some of the results are not 100% accurate. Please do a manual check first before put it directly to other tools to scan.

Some specific technique require different input so please see the usage of each technique.

Using certificate to find related domains on crt.sh

# Getting more related domains by searching for certificate info
echo 'Target Inc' | metabigor cert --json | jq -r '.Domain' | unfurl format %r.%t | sort -u # this is old command

# Getting more related domains by searching for certificate info
echo 'example Inc' | metabigor related -s 'cert'

Using Reverse Whois to find related domains

echo 'example.com' | metabigor related -s 'whois'

Getting more related by searching for Google Analytics ID

# Get it directly from the URL
echo 'https://example.com' | metabigor related -s 'google-analytic'

# You can also search it directly from the UA ID too
metabigor related -s 'google-analytic' -i 'UA-9152XXX' --debug

Extract Shodan IPInfo from internetdb.shodan.io

echo '1.2.3.4' | metabigor ip -open
1.2.3.4:80
1.2.3.4:443

# lookup CIDR range
echo '1.2.3.4/24' | metabigor ip -open -c 20
1.2.3.4:80
1.2.3.5:80

# get raw JSON response
echo '1.2.3.4' | metabigor ip -json