-

0x01

Ske

0x727https://github.com/0x727

python3

CIP

ksubdomaintheHarvesterksubdomaintheHarvester

0x02

,

• root
• Python3.7VPSubuntu20python3.8
• iniFile/config.iniapifofashodangithubvirustotal

chmod 777 build.sh
./build.sh

python3 ShuiZe.py -h

dockerShuiZe

dockerShuiZe

dockerpython3.8git clonedocker_build.sh

apt install docker.io
docker pull yankovg/python3.8.2-ubuntu18.04
docker run -itd yankovg/python3.8.2-ubuntu18.04 bash
docker exec -it dockerID /bin/bash
apt-get update
apt install git --fix-missing
apt install vim
rm /usr/bin/python3
ln -s /usr/local/bin/python3.8 /usr/bin/python3
python3 -m pip install --upgrade pip
git clone https://github.com/0x727/ShuiZe_0x727.git
chmod 777 docker_build.sh
./docker_build.sh

@1itt1eB0y Dockerfiledocker-compose.yml

https://github.com/1itt1eB0y/MyCollection/tree/master/docker/shuize

---

LinuxNucleiksubdomainwindowsmac

0x03

ksubdomain

theHarvest

->

github -> githubtxt

A,CDNCIP

FofaShodan

IP

excel

excel

Github

ACDN

ip

C

0x04 POC

POCPlugins/Vul/Web/__template__.py

run_detectPOC

0x05

python3 ShuiZe.py -d domain.com
python3 ShuiZe.py --domainFile domain.txt
python3 ShuiZe.py -c 192.168.1.0,192.168.2.0,192.168.3.0	C
python3 ShuiZe.py -f url.txt	url
python3 ShuiZe.py --fofaTitle XXX	fofaXXX
python3 ShuiZe.py -d domain.com --justInfoGather 1
python3 ShuiZe.py -d domain.com --ksubdomain 0	ksubdomain

0x06

• -> -> :http://icp.chinaz.com
• • ->
  • -> ksubdomain(linuxksubdomain:./Plugins/infoGather/subdomain/ksubdomain/ksubdomain_linux)
• theHarvester ->
• ->
• virustotal -> https://www.virustotal.com -> api
• ce.baidu.com -> http://ce.baidu.com
• url.fht.im -> https://url.fht.im/
• qianxun -> https://www.dnsscan.cn/
• sublist3r -> https://api.sublist3r.com
• crt.sh -> https://crt.sh
• certspotter -> https://api.certspotter.com
• bufferover -> http://dns.bufferover.run
• threatcrowd -> https://threatcrowd.org
• hackertarget -> https://api.hackertarget.com
• chaziyu -> https://chaziyu.com/hbu.cn/
• rapiddns -> https://rapiddns.io
• sitedossier -> http://www.sitedossier.com
• ximcx -> http://sbd.ximcx.cn
• github -> githubtxt-
  • iniFile/config.ini('jdbc:', 'password', 'username', 'database', 'smtp', 'vpn', 'pwd', 'passwd', 'connect')
• -> ('inurl:admin', 'inurl:login', 'inurl:system', 'inurl:register', 'inurl:upload', '', '', '')
• ->
• ->

• CDNA

• cIP

• • fofa -> API
  • shodan -> API

• ipIP

• Web ->

  • • (['admin', 'login', 'system', 'manager', 'admin.jsp', 'login.jsp', 'admin.php', 'login.php','admin.aspx', 'login.aspx', 'admin.asp', 'login.asp'])
    • URLIPIP
  • -> Plugins/Vul/Web

• Web -->

:

0x07

2021.7.31 CensysiniFile/config.ini[censys api]API IPHostCIP

censysapi250api

2021.7.31 Host -

2021.8.1 CDNbug **leveryd ** bug

issueshttps://github.com/0x727/ShuiZe_0x727/issues/3

2021.8.3 chinazApibug10 **k0njac **bug

issueshttps://github.com/0x727/ShuiZe_0x727/issues/11

2021.8.13 Github

2021.8.17 ksubdomain

ksubdomainhttps://github.com/knownsec/ksubdomain

2021.9.1 fofasocksproxychainsIP

-1amfine2333

2021.9.2 Confluencehttps://github.com/h3v0x/CVE-2021-26084_Confluence

2021.9.4

pykiller gubeiya

issueshttps://github.com/0x727/ShuiZe_0x727/issues/25

2021.9.26 api,-d -c --fofaTitle

10005w

config.iniquake_nums

issueshttps://github.com/0x727/ShuiZe_0x727/issues/33

2021.11.30 hunterapi,-d -c --fofaTitle

200

config.iniqianxin_nums

issueshttps://github.com/0x727/ShuiZe_0x727/issues/48

2022.1.17 certspotter

union-cmd

issueshttps://github.com/0x727/ShuiZe_0x727/issues/57

2022.3.21 fofa api

2022.3.21

2022.3.23 securitytrailsconfig.iniapi keys

issueshttps://github.com/0x727/ShuiZe_0x727/issues/48

: https://docs.securitytrails.com/

---

2022.3.23

-chhyx

2022.4.13

issueshttps://github.com/0x727/ShuiZe_0x727/issues/74

cwkiller

2022.4.16 Nuclei

nucleiiniFile/config.ininuclei_config = -rl 300 -c 50 -timeout 5 -stats -silent -severity critical,high

2022.7.5 Nuclei-as

issues: https://github.com/0x727/ShuiZe_0x727/issues/104

-as wappalyzer

anquanbiji

2022.8.12 ShuiZeDockerfile

issues: https://github.com/0x727/ShuiZe_0x727/issues/99

@1itt1eB0y ****

2022.8.12 aiqichaIP

2022.8.12 quakeApititle

issues: https://github.com/0x727/ShuiZe_0x727/issues/120

Zimba5880

2022.8.20 IP

https://www.kuaidaili.com/cart?t=tps_c

IPiniFile/config.inithread_num

5thread_num10

hostportusernamepassword

switchon

2022.8.27 ObserverWard

https://github.com/0x727/ObserverWard

https://github.com/0x727/FingerprintHub

0x08

ShuiZe

• issues

• Bug Pull Request dev

• issue Pull Request

• ShuiZe

• PR dev master

• issues *

Stargazers over time