Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/silverpoision/rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
https://github.com/silverpoision/rock-on

portscanner recon reconaissance rock-on subdomain-bruteforcing subdomain-enumeration subdomain-scanner subdomain-takeover

Last synced: 8 days ago
JSON representation

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

Awesome Lists containing this project

README

        

# Rock-ON (A One-Shoot Killer)
![Rock-ON Logo](Images/logo1.jpg)

Rock-On is a all in one recon tool that will help your Recon process give a boost. It is mainley aimed to automate the whole process of recon and save the time that is being wasted in doing all this stuffs manually. A thorough blog will be up in sometime. Stay tuned for the Stable version with a UI.

# Features

1. Sub Domain Scraping
1. Finding A.S.N -> Netblocks -> IP's
1. Resolving
1. Finding Ports
1. Finding VHost
1. Finding Directories
1. Finding Sub Takeovers
1. Asset tracker with live monitoring
1. Push Notifications to Slack
1. Finding JS link then relative links in them and some sensitive files
1. Active and passive crawling

# Recommendation

Machine Configuration - Debian- 9.4, 4 GB RAM on DigitalOcean and its will be good to run this tool on a new and fresh VPS.

### For Censys:
Set the API and SECRET KEY in the sub.sh unless you want to set it again and again.

For removing:
```
1. Delete the lines 13-18
2. Then set you API and SECRET KEY on line 47 & 48 like this: export CENSYS_API_ID=your_key_here
```

### For getting notification on Slack:
Change the webhook address to your one in sub.sh, ASN.sh and Sublert.py-> config.py to get notification while you do your other works.

For changing:
```
1. Replace the Webhook address at line 113 in sub.sh and 15 in ASN.sh
2. Replace the Webhook address in Tools/sublert/config.py
```
#### AND

Follow @yassineaboukir guide to configure the slack for sublert and also for creating a webhook address for sub.sh and ASN.sh here:
https://medium.com/@yassineaboukir/automated-monitoring-of-subdomains-for-fun-and-profit-release-of-sublert-634cfc5d7708

# Tools Added
Thanks to all the aurthors who have written these scripts and making a huge contribution to the great community. A big shout-out for @ehsahil for his blog on recon that helped me a lot while making this tool and taking examples for the repository.

1. Sublist3r
1. Knock
1. Subfinder
1. Censys
1. Amass
1. CT Logs
1. CTFR
1. Wayback
1. San Domains
1. AltDns
1. NMAP
1. Masscan
1. MassDNS
1. Sublert
1. Aquatone
1. Vhost
1. Rapid7 FDNS DB
1. AWS-CLI
1. Dirsearch

1. More to be added...

# Requirements

### Go-Languange

Install by Following methods:
```
wget https://dl.google.com/go/go1.12.5.linux-amd64.tar.gz
tar -C /usr/local -xzf go1.12.5.linux-amd64.tar.gz
rm -f go1.12.5.linux-amd64.tar.gz
nano ~/.profile
```
Add this lines
```
export PATH=$PATH:/usr/local/go/bin
export GOROOT=/usr/local/go
```

# Installation

### Note: For a new Fresh VPS run this commands first:
```
sudo apt-get upgrade && sudo apt-get update && sudo apt-get install git
```

```
git clone https://github.com/SilverPoision/Rock-ON.git
cd Rock-ON
chmod +x rockon.sh
./rockon.sh
1
```
Also don't forget to configure your AWS credentials by running
```
aws configure
```
# Usage

```
./rockon.sh
```
Enter your choice and then the required Information.

# Screenshot
![Rock-ON SC](Images/Screenshot%202019-06-17%20at%2012.33.34%20PM.png)
![Rock-ON SC](Images/Screenshot%202019-06-17%20at%2012.44.42%20PM.png)

#### Note: Run the below command while running the 4th option for the first time.
```
gem install colorize
```

# Give Rock-On some Love

If this tool was useful to you during your recon stages - I would love to know. Any suggestions or ideas for this tool are appreciated - Just DM me on [Facebook](https://www.facebook.com/silverpoision) or [Twitter](https://twitter.com/SilverPoision)