My-BB-Scripts

This repository contains one off scripts that I use personally in my bug-bounty workflow. These are simply some tasks that I have regularly come up while hunting bugs and doing stuff in terminal.

• This script sorts huge list of subdomains(multiple root-domains) from a file to new files belonging to a particular root-domain with their name on it.
• For example: all subdomains belonging to 'google.com' will be added to a file named 'google.com.txt'.
• This can be later be used to do domain specific recon or alt/perm using regulator where we can only provide one domain file at a time, plus easy to organise as well.
• Usage: python3 sort_subdomains.py subs.txt -t 10

• This script takes a list of subdomains resolve it to see the alive ones and sort them out in different files.
• Usage: python3 subresolver.py domains.txt -t 10
• Resulting files will be:
  • alive_domains.txt -> Contains domain names that did resolve to an IP
  • resolved_domains.txt -> Resolved domains from the original list and their IP as a comma separated value
  • ip_addr.txt -> Unique IP address that the domains resolved to

• This script is specifically used for making a combined-wordlist of user:pass for bruteforcing attack from a tool like hydra
  • It will have all the permutations of users and passwords from both files.
• Usage: python3 wordlist_combiner.py user.txt pass.txt num_threads
• The output of this will be in a new file combined-wordlist.txt in the format

user1:pass1
user1:pass2
user1:pass3
user2:pass1
user2:pass2
... so on

• This script cleans a huge ass wordlist from noisy and unncessary things such as not useful file extensions which can be later used to create a new target specific wordlist or even permutations of it so we can do content discovery with it afterwards.
• Usage: python3 wordlist_cleaner.py wordlist.txt
• The output will be saved in a new file: wordlist.txt_cleaned
• This is a modified version of what @BonJarber made a few years back. You can check the original one here: clean_wordlist.sh

• A simple script to bulk download javascript files after curating a list of javacript urls from the target, it uses multi-threading to download the files you can also change the number of threads inside the script I have kept it default to 10.
• Usage: python3 download_js.py js-urls.txt
• It will download the javascript files inside a folder called downloaded-js

• This Python script is a custom web server that can be used for various purposes, including testing and redirection.

  • It allows you to set up a simple web server quickly and easily with the ability to serve files and handle GET & POST requests.
  • Optional redirection feature for specific paths.
  • Verbose mode for detailed logging.

  USAGE:

  • --hostname: Specifies the hostname for the server (required).
  • --redirect: Allows you to specify a redirection target URL.
  • --redirect_code: Sets the HTTP response code for redirection (default is 303).
  • --redirect_token: Manually sets the redirect token for redirection.
  • --verbose: Enables verbose mode for detailed logging.
  • -l or --log_to_file: Saves logs to a file named 'server.log'.

• This Python script automates the process of running nmap scans based on IP and port data from an input file. It provides a streamlined workflow that includes parsing the input file, running nmap scans in parallel, saving the results in XML format, and finally combining all the individual XML files into a single file for easier analysis.

• Input Parsing: Reads IP:Port data from a specified input file.
• Parallel Execution: Utilizes multi-threading to perform nmap scans concurrently, speeding up the overall process.
• Organized Output: Saves the nmap scan results in a timestamped directory within the specified output directory.
• Combining Results: Merges all the individual nmap XML output files into a single nmap_out.xml file for comprehensive analysis.
• Detailed Logging: Generates a log file (nmap_scan.log) that tracks the execution process, making it easier to debug and monitor the script's performance.

• -i or --input: Specifies the input file containing IP:Port data (default: naabu_results.txt).
• -o or --output: Specifies the output directory where nmap results will be saved (default: nmap-out).
• -t or --threads: Specifies the number of threads for parallel nmap execution (default: 4).

python3 full_nmap_script.py -i naabu_results.txt -o nmap-out -t 4