Website OSINT

Websites

• BuiltWith

• Domain Dossier

• DNSlytics

• SpyOnWeb

• Virus Total

• Visual Ping

• Back Link Watch

• View DNS

• Pentest-Tools Subdomain Finder

• Spyse

• crt.sh

• Shodan

• Wayback Machine

Tools

• Wappalyzer Plugin/Extention

• Subfinder

go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
subfinder -d domain

Put this into a file for httprobe

• Assetfinder

go install -v github.com/tomnomnom/assetfinder@latest
assetfinder domain

Put this into a file for httprobe

• httprobe

go install -v github.com/tomnomnom/httprobe@latest
cat tesla.txt | sort -u | httprobe -s -p https:443

Only returns sites that are up/active

• Amass

go install -v github.com/owasp-amass/amass/v4/...@master
amass enum -d domain

• GoWitness

go install github.com/sensepost/gowitness@latest
gowitness file -f ./alive.txt -P ./pics --no-http

strip http/https/:443 from the alive.txt made from httprobe

• whois

whois domain