dheerajmadhukar/karma_v2⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ — это пассивная разведка на основе открытых источников (OSINT) с автоматизированным сбором данных (фреймворк)
⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾
Сайт Shodan: Shodan Website API: Developer API
# git clone https://github.com/Dheerajmadhukar/karma_v2.git
# python3 -m pip install shodan mmh3
# apt install jq -y
# go install -v github.com/tomnomnom/httprobe@master
# git clone https://github.com/codingo/Interlace.git & install accordingly.
# go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest
# apt install lolcat -y
# go install -v github.com/tomnomnom/anew@master
# cat > .token
SHODAN_PREMIUM_API_HERE
Вы можете использовать эту команду для просмотра справки:
$ bash karma_v2 -h
-deep поддерживает все вышеперечисленные режимы: -count, -ip, -asn, -favicon, -cve, -leaks!
output/bugcrowd.com-YYYY-MM-DD/
.
├── ASNs_Detailed_bugcrowd.com.txt
├── Collect
│ ├── host_domain_domain.tld.json.gz
│ ├── ssl_SHA1_12289a814...83029f8944b6088d60204a92e_domain.tld.json.gz
│ ├── ssl_SHA1_17537bf84...73cb1d684a495db7ea5aa611b_domain.tld.json.gz
│ ├── ssl_SHA1_198d6d4ec...681b77585190078b07b37c5e1_domain.tld.json.gz
│ ├── ssl_SHA1_26a9c5618...d60eae2947b42263e154d203f_domain.tld.json.gz
│ ├── ssl_SHA1_3da3825a2...3b852a42470410183adc3b9ee_domain.tld.json.gz
│ ├── ssl_SHA1_4d0eab730...68cf11d2db94cc2454c906532_domain.tld.json.gz
│ ├── ssl_SHA1_8907dab4c...12fdbdd6c445a4a8152f6b7b7_domain.tld.json.gz
│ ├── ssl_SHA1_9a9b99eba...5dc5106cea745a591bf96b044_domain.tld.json.gz
│ ├── ssl_SHA1_a7c14d201...b6fd4bc4e95ab2897e6a0bsfd_domain.tld.json.gz
│ ├── ssl_SHA1_a90f4ddb0...85780bdb06de83fefdc8a612d_domain.tld.json.gz
│ ├── ssl_domain_domain.tld.json.gz
│ ├── ssl_subjectCN_domain.tld.json.gz
│ └── ssl_subject_domain.tld.json.gz
| └── . . .
├── IP_VULNS
│ ├── 104.x.x.x.json.gz
│ ├── 107.x.x.x.json.gz
│ ├── 107.x.x.x.json.gz
│ └── 99.x.x.x.json.gz
| └── . . .
├── favicons_domain.tld.txt
├── host_enum_domain.tld.txt
├── ips_inscope_domain.tld.txt
├── main_domain.tld.data
├── . . .
Если вам нравится ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ и он помогает вам в работе, заработке/баг-баунти, пентесте, разведке или просто приносит приятные ощущения, пожалуйста, поддержите меня!
🛑 Пожалуйста, воздержитесь от открытия вопросов на GitHub для запросов поддержки или вопросов!
купите мне пиво, чтобы я оставался на плаву :)
| РЕЖИМ | Примеры |
|---|
| -ip | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -ip |
| -asn | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -asn |
| -cve | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -cve |
| -cveid | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -cveid CVE-2021-34473 |
| -favicon | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -favicon |
| -leaks | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -leaks |
| -deep | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -deep |
| -count | bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -count |
| DORKs | DORKs | DORKs |
|---|
ssl.cert.fingerprint | http.status:"302" oauth | "Server: Jetty" |
ssl | http.status:"302" sso | X-Amz-Bucket-Region |
org | title:"401 Authorization Required" | "development" org:"Amazon.com" |
hostname | http.html:"403 Forbidden" | "X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Jenkins [Jenkins]" |
ssl.cert.issuer.cn | http.html:"500 Internal Server Error" | http.favicon.hash:81586312 200 |
ssl.cert.subject.cn | ssl.cert.subject.cn:*vpn* | product:"Kubernetes" port:"10250, 2379" |
ssl.cert.expired:true | title:"citrix gateway" | port:"9100" http.title:"Node Exporter" |
ssl.cert.subject.commonName | http.html:"JFrog" | http.title:"Grafana" |
http.title:"Index of /" | "X-Jfrog" | http.title:"RabbitMQ" |
ftp port:"10000" | http.title:"dashboard" | HTTP/1.1 307 Temporary Redirect "Location: /containers" |
"Authentication: disabled" port:445 product:"Samba" | http.title:"Openfire Admin Console" | http.favicon.hash:1278323681 |
title:"Login - Adminer" | http.title:"control panel" | "MongoDB Server Information" port:27017 -authentication |
http.title:"sign up" | http.html:"* The wp-config.php creation script uses this file" | port:"9200" all:"elastic indices" |
http.title:"LogIn" | clockwork | "220" "230 Login successful." port:21 |
port:"11211" product:"Memcached" | "port: 53" Recursion: Enabled | title:"kibana" |
port:9090 http.title:"Prometheus Time Series Collection and Processing Server" | "default password" | title:protected |
http.component:Moodle | http.favicon.hash:116323821 | html:"/login/?next=" title:"Django" |
html:"/admin/login/?next=" title:"Django" | title:"system dashboard" html:jira | http.component:ruby port:3000 |
html:"secret_key_base" | I will add more soon | . . . |
| DORKs | DORKs | DORKs |
|---|
"netweaver" | port:"2379" product:"etcd" | http.title:"DisallowedHost" |
ssl:"${target}" "-AkamaiGHost" "-GHost" | ssl:"${target}" "-Cloudflare" | ssl:"${target}" "-Cloudfront" |
"X-Debug-Token-Link" port:443 | http.title:"shipyard" HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5664 | http.title:"TIBCO Jaspersoft:" port:"443" "1970" |
"Confluence" | http.title:"SonarQube" | html:"jmx?qry=Hadoop:*" |
http.title:"Directory Listing" | http.title:"H-SPHERE" | http.title:"Swagger UI - " |
Server: Apache-Coyote/1.1 Tomcat-5.5" | port:2375 product:"Docker" | http.title:"phpinfo()" |
http.title:"ID_VC_Welcome" | "x-powered-by" "jboss" | jboss http.favicon.hash:-656811182 |
http.title:"Welcome to JBoss" | port:"8089, 8000" "splunkd" | http.favicon.hash:-316785925 |
title:"splunkd" org:"Amazon.com" | http.title:"oracle business intelligence sign in" | http.title:"Oracle WebLogic Server Administration Console" |
http.title:"Apache Status" | I will add more soon | . . . |
