https://github.com/hellblack55/dobby
This script finds subdomains and URLs, filters them into .js, .json, and sensitive categories, and helps streamline your security assessments and bug hunting.
https://github.com/hellblack55/dobby
bash bash-script bug bug-bounty bugbounty bugbounty-tool
Last synced: 5 months ago
JSON representation
This script finds subdomains and URLs, filters them into .js, .json, and sensitive categories, and helps streamline your security assessments and bug hunting.
- Host: GitHub
- URL: https://github.com/hellblack55/dobby
- Owner: hellblack55
- Created: 2024-08-24T22:33:34.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2025-07-26T20:36:04.000Z (11 months ago)
- Last Synced: 2025-07-27T00:19:53.663Z (11 months ago)
- Topics: bash, bash-script, bug, bug-bounty, bugbounty, bugbounty-tool
- Language: Shell
- Homepage:
- Size: 27.3 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# dobby
This Bash script automates the reconnaissance phase of bug bounty hunting by integrating several tools to discover subdomains, identify live domains, and extract URLs for further analysis. It is configurable, allowing adjustments for thread count, Amass usage, and timeouts. It is on its way to be upraded.
## Key Features
## Subdomain Enumeration:
Uses Subfinder, Assetfinder, and optionally Amass to discover subdomains.
Removes duplicates and stores results in subdomains.txt.
## Live Domain Probing:
Uses httprobe to identify responsive domains, saving results in httprobe.txt.
## URL Discovery:
Fetches historical and current URLs using Waybackurls and Getallurls, consolidating them in all_urls.txt.
## Filtering and Categorization:
Extracts JavaScript (js_files.txt) and JSON files (json_files.txt).
Filters URLs for sensitive keywords, storing them in important_urls.txt.
## How It Works
Input Domain: The user provides a domain, which determines the output directory.
Concurrency: Tools run in parallel where possible, using configurable thread counts.
Efficiency: Anew ensures all results are unique, preventing duplicates.
Keyword Filtering: Grep identifies URLs with potential security significance based on predefined keywords.
## Tools Used
Subfinder, Assetfinder, Amass (optional)
Httprobe
Waybackurls, Getallurls
Anew, Grep
## Usage
```
./dobby.sh [-t threads] [-a] [-m timeout]
Options:
-t, --threads Number of threads (default: 10)
-a, --amass Run Amass for subdomain enumeration
-m, --timeout Amass timeout in seconds (default: 300)
-h, --help Show this help message
```
## 🚀 Installation Guide
Follow these steps to install and set up **Dobby** on a Linux system:
```bash
git clone https://github.com/hellblack55/dobby
cd dobby
chmod +x setup.sh
./setup.sh
```
And you are all done!
## Verification
You can verify the installation by running the following commands:
```
bash
Copy code
subfinder -version
assetfinder -version
amass -version
httprobe -version
waybackurls -h
gau -h
anew -h
```
If these commands return the version or help output, the tools are installed correctly, and you're ready to run the script.