<commit_before>```
Custom bash scripts used to automate various penetration testing tasks including recon, scanning, 
enumeration, and creating malicious payloads using Metasploit. For use with Kali Linux.
```

[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/leebaird/discover/blob/master/LICENSE)
[![Rawsec's CyberSecurity Inventory](https://inventory.rawsec.ml/img/badges/Rawsec-inventoried-FF5050_flat.svg)](https://inventory.rawsec.ml/tools.html#discover)

* [![Twitter Follow](https://img.shields.io/twitter/follow/discoverscripts.svg?style=social&label=Follow)](https://twitter.com/discoverscripts) <NAME> @discoverscripts
* [![Twitter Follow](https://img.shields.io/twitter/follow/jay_townsend1.svg?style=social&label=Follow)](https://twitter.com/jay_townsend1) Jay "L1ghtn1ng" Townsend @jay_townsend1
* [![Twitter Follow](https://img.shields.io/twitter/follow/ninewires.svg?style=social&label=Follow)](https://twitter.com/ninewires) <NAME> @ninewires

### Download, setup, and usage
* git clone https://github.com/leebaird/discover /opt/discover/
* Discover should be ran as root from this location.
* cd /opt/discover/
* sudo ./discover.sh
* Select option 15 to update Kali Linux, Discover scripts, various tools, and the locate database before using the framework.


```
RECON
1.  Domain
2.  Person

SCANNING
3.  Generate target list
4.  CIDR
5.  List
6.  IP, range, or URL
7.  Rerun Nmap scripts and MSF aux

WEB
8.  Insecure direct object reference
9.  Open multiple tabs in Firefox
10. Nikto
11. SSL

MISC
12. Parse XML
13. Generate a malicious payload
14. Start a Metasploit listener
15. Update
16. Exit
```
## RECON
### Domain
```
RECON

1.  Passive
2.  Active
3.  Import names into an existing recon-ng workspace
4.  Previous menu
```

Passive uses Amass, ARIN, DNSRecon, dnstwist, goog-mail, goohost, theHarvester,
    Metasploit, Whois, multiple websites, and recon-ng.

Active uses DNSRecon, recon-ng, Traceroute, wafw00f, and Whatweb.

[*] You should acquire various API keys for maximum results with theHarvester and add them here:

```
/opt/theHarvester/api-keys.yaml
```

### Person
```
RECON

First name:
Last name:
```

* Combines info from multiple websites.

## SCANNING
### Generate target list<commit_msg>Thanks to Jay, this is the correct location for the API keys.<commit_after>```
Custom bash scripts used to automate various penetration testing tasks including recon, scanning, 
enumeration, and creating malicious payloads using Metasploit. For use with Kali Linux.
```

[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/leebaird/discover/blob/master/LICENSE)
[![Rawsec's CyberSecurity Inventory](https://inventory.rawsec.ml/img/badges/Rawsec-inventoried-FF5050_flat.svg)](https://inventory.rawsec.ml/tools.html#discover)

* [![Twitter Follow](https://img.shields.io/twitter/follow/discoverscripts.svg?style=social&label=Follow)](https://twitter.com/discoverscripts) <NAME> @discoverscripts
* [![Twitter Follow](https://img.shields.io/twitter/follow/jay_townsend1.svg?style=social&label=Follow)](https://twitter.com/jay_townsend1) Jay "L1ghtn1ng" Townsend @jay_townsend1
* [![Twitter Follow](https://img.shields.io/twitter/follow/ninewires.svg?style=social&label=Follow)](https://twitter.com/ninewires) <NAME> @ninewires

### Download, setup, and usage
* git clone https://github.com/leebaird/discover /opt/discover/
* Discover should be ran as root from this location.
* cd /opt/discover/
* sudo ./discover.sh
* Select option 15 to update Kali Linux, Discover scripts, various tools, and the locate database before using the framework.


```
RECON
1.  Domain
2.  Person

SCANNING
3.  Generate target list
4.  CIDR
5.  List
6.  IP, range, or URL
7.  Rerun Nmap scripts and MSF aux

WEB
8.  Insecure direct object reference
9.  Open multiple tabs in Firefox
10. Nikto
11. SSL

MISC
12. Parse XML
13. Generate a malicious payload
14. Start a Metasploit listener
15. Update
16. Exit
```
## RECON
### Domain
```
RECON

1.  Passive
2.  Active
3.  Import names into an existing recon-ng workspace
4.  Previous menu
```

Passive uses Amass, ARIN, DNSRecon, dnstwist, goog-mail, goohost, theHarvester,
    Metasploit, Whois, multiple websites, and recon-ng.

Active uses DNSRecon, recon-ng, Traceroute, wafw00f, and Whatweb.

[*] You should acquire various API keys for maximum results with theHarvester and add them here:

```
/etc/theHarvester/api-keys.yaml
```

### Person
```
RECON

First name:
Last name:
```

* Combines info from multiple websites.

## SCANNING
### Generate target list
{'fraction_non_alphanumeric': 0.12532637075718014, 'fraction_numerical': 0.017406440382941687, 'mean_word_length': 4.724782067247821, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 7, 'https://': 22, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5023785', 'n_tokens_mistral': 1647, 'n_tokens_neox': 1514, 'n_words': 444}