"I have a barebones project that I want to share. It is a quick tool to scan scam sites for open logs and directory listings that could be useful or interesting. Although it could use some improvements, it works well for its purpose.
To use it, you will need to have dirsearch in your path. The tool will automatically download a decent scam list and wordlist for you to run, but you can modify it as you wish.
Here is what the tool does:
1. Downloads a list of known scam sites (you can change the link if you want)
2. Downloads a basic wordlist for common misconfigured files
3. Checks for subdomains for each line in the file
4. For each subdomain, it runs a dirsearch to find those files
5. Repeats the cycle for each subdomain found"
Script:-
Example output:
To use it, you will need to have dirsearch in your path. The tool will automatically download a decent scam list and wordlist for you to run, but you can modify it as you wish.
Here is what the tool does:
1. Downloads a list of known scam sites (you can change the link if you want)
2. Downloads a basic wordlist for common misconfigured files
3. Checks for subdomains for each line in the file
4. For each subdomain, it runs a dirsearch to find those files
5. Repeats the cycle for each subdomain found"
Script:-
Example output: