{"id":13844774,"url":"https://github.com/hackerspider1/EchoPwn","last_synced_at":"2025-07-12T00:31:44.181Z","repository":{"id":49816104,"uuid":"254754355","full_name":"hackerspider1/EchoPwn","owner":"hackerspider1","description":"Recon Automation for hackers by hackers","archived":false,"fork":false,"pushed_at":"2020-07-14T09:25:58.000Z","size":4137,"stargazers_count":244,"open_issues_count":0,"forks_count":67,"subscribers_count":14,"default_branch":"master","last_synced_at":"2024-08-05T17:43:03.162Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hackerspider1.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-04-10T23:14:08.000Z","updated_at":"2024-07-27T01:56:07.000Z","dependencies_parsed_at":"2022-09-13T20:53:34.738Z","dependency_job_id":null,"html_url":"https://github.com/hackerspider1/EchoPwn","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackerspider1%2FEchoPwn","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackerspider1%2FEchoPwn/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackerspider1%2FEchoPwn/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackerspider1%2FEchoPwn/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hackerspider1","download_url":"https://codeload.github.com/hackerspider1/EchoPwn/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225772749,"owners_count":17521882,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:02:56.204Z","updated_at":"2024-11-21T17:30:47.801Z","avatar_url":"https://github.com/hackerspider1.png","language":"Shell","funding_links":["https://www.buymeacoffee.com/hackerspider1"],"categories":["Shell (473)","Shell"],"sub_categories":[],"readme":"\n\n# EchoPwn\n\n\u003ca href=\"https://www.buymeacoffee.com/hackerspider1\" target=\"_blank\"\u003e\u003cimg src=\"https://cdn.buymeacoffee.com/buttons/default-orange.png\" alt=\"Buy Me A Coffee\" style=\"height: 51px !important;width: 217px !important;\" \u003e\u003c/a\u003e\n\n#### This is a recon tool which allows you to discover the subdomains used by a target web application on both client and server side. Afterwards, it runs dirsearch on the resulted text file. It can also scan for open ports using NMAP and finds hidden parameters on every live Host.\n\n![EchoPwn](https://github.com/hackerspider1/echopwn/blob/master/Readme/echopwn.png)\n## For installation steps Please refer to this [link](https://echopwn.com/road-to-recon-with-echopwn-sh/).\n\n# Usage\n\n```\nUsage: ./EchoPwn.sh [options] -d domain.com\nOptions:\n    -h            Display this help message.\n    -k            Run Knockpy on the domain.\n    -n            Run Nmap on all subdomains found.\n    -a            Run Arjun on all subdomains found.\n    -p            Run Photon crawler on all subdomains found.\n    -b            Run Custom Bruteforcer to find subdoamins.\n\n  Target:\n    -d            Specify the domain to scan.\n\nExample:\n    ./EchoPwn.sh -d hackerone.com\n\nOutput will be saved in EchoPwn/domain.com/ directory\n```\n\n![EchoPwn.gif](https://github.com/hackerspider1/EchoPwn/blob/master/Readme/Echopwn.gif)\n\n# Workflow:\n `install.sh` makes environment to run `EchoPwn.sh`\n  `EchoPwn.sh` creates a directory `EchoPwn/domain_name` in current working directory.\n1. **Subdomain Enumeration**\n\t- Sublist3r\n\t- crt.sh\n\t- amass\n\t- subfinder\n\t- assetfinder\n\t- aquatone-discover\n\t- findomain\n\t- github-subdomains\n\t- custom bruteforcer with `subdomains.txt` as input file.\n\t- **Optional:** knockpy\n\n2. **Checking for live subdomains**\n\t- httprobe\n\n3. **Screenshots**\n\t- aquatone\n\n4. **Directory Bruteforce**\n\t- dirsearch\n\n5. **Optional**\n\t- -n [Nmap] \u0026emsp;\u0026emsp;\u0026emsp; Probe open ports to determine service/version info\n\t- -a [Arjun] \u0026emsp; \u0026emsp;\u0026emsp; Scans for hidden parameters on live hosts\n\t- -p [Proton] \u0026emsp;\u0026emsp; Crawls all live hosts [takes time and creates lots of files]\n  - -b [Custom Bruteforcer] \u0026emsp;\u0026emsp; Runs custom bruteforcer to find subdomains\n\t- -k [KnockPy] \u0026emsp;\u0026emsp;\u0026emsp; Bruteforce subdomains [takes time and saves output in current working directory (in json format)]\n\n6. **Checking for subdomain takeover**\n\t- Subdomain-takeover\n\n7. **Slack Notification**\n\t- WebHook URL placed in `tokens.txt` will be used to notify the user once the script has finished running.\n\n![Slack](https://github.com/hackerspider1/EchoPwn/blob/master/Readme/slack_url.png)\n\nFinal list of subdomains will be present in `EchoPwn/domain_name` directory.\nOutputs corresponding to the tools will also be present in the same directory.\n\n# Installation and Requirements:\n#### Only for MacOS and Linux\n##### Prerequisites\n1. go\n2. gem\n\nThen run:\n```\n./install.sh\n```\nSome Tools require manual downloading of pre-built binaries (or build them yourself):\n1. [Subfinder](https://github.com/projectdiscovery/subfinder/releases/)\n2. [Assestfinder](https://github.com/tomnomnom/assetfinder/releases)\n3. [Aquatone](https://github.com/michenriksen/aquatone/releases/tag/v1.7.0)\n\nDownload (or build) and place these binaries in the `EchoPwn` directory.\n\nApart from the tokens required by individual tools, this script requires 4 additional values:\n- FaceBook Token\n- Github Token\n- Spyse Token\n- VirusTotal Token\n- Slack WebHook URL\n\nPlace these values in `tokens.txt` before running `EchoPwn.sh`\n\n\n**NOTE**\n1. If you face Import error (Queue) while running altdns, you have to manually change __main__.py file mentioned in the error. Do the following change\nBefore: `Import Queue from Queue as Queue`\nAfter: `Import queue from Queue as Queue`\n\n2. To set GOPATH, use the following command:\n`export $GOPATH=~/go/bin`\n\nSuggestions are welcomed.\nMail us at: **admin@echopwn.com**\n\n\n# Thanks\n#### This script uses tools which are developed by the following people\n[OWASP](https://github.com/OWASP/), [ProjectDiscovery](https://github.com/projectdiscovery/), [Tom Hudson](https://github.com/tomnomnom/), [Michael Henriksen](https://github.com/michenriksen/), [Gwendal Le Coguic](https://github.com/gwen001/), [Eduard Tolosa](https://github.com/Edu4rdSHL/), [B. Blechschmidt](https://github.com/blechschmidt/), [ProjectAnte](https://github.com/ProjectAnte/), [Somdev Sangwan](https://github.com/s0md3v/), [Mauro Soria](https://github.com/maurosoria/), [Gianni Amato](https://gitub.com/guelfoweb/), [Ahmed Aboul-Ela](https://github.com/aboul3la/), [0x94](https://github.com/antichown/subdomain-takeover)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhackerspider1%2FEchoPwn","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhackerspider1%2FEchoPwn","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhackerspider1%2FEchoPwn/lists"}