autorecon/results/report.md/passbolt.lan.ddnsgeek.com/Commands.md

nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml" passbolt.lan.ddnsgeek.com

nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" passbolt.lan.ddnsgeek.com

feroxbuster -u http://passbolt.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"

curl -sSikf http://passbolt.lan.ddnsgeek.com:80/.well-known/security.txt

curl -sSikf http://passbolt.lan.ddnsgeek.com:80/robots.txt

curl -sSik http://passbolt.lan.ddnsgeek.com:80/

nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://passbolt.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"

nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" passbolt.lan.ddnsgeek.com

ffuf -u http://passbolt.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.passbolt.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"

whatweb --color=never --no-errors -a 3 -v http://passbolt.lan.ddnsgeek.com:80 2>&1

feroxbuster -u https://passbolt.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"

curl -sSikf https://passbolt.lan.ddnsgeek.com:443/.well-known/security.txt

curl -sSikf https://passbolt.lan.ddnsgeek.com:443/robots.txt

curl -sSik https://passbolt.lan.ddnsgeek.com:443/

nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://passbolt.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"

nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" passbolt.lan.ddnsgeek.com

nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" passbolt.lan.ddnsgeek.com

sslscan --show-certificate --no-colour passbolt.lan.ddnsgeek.com:443 2>&1

ffuf -u https://passbolt.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.passbolt.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"

whatweb --color=never --no-errors -a 3 -v https://passbolt.lan.ddnsgeek.com:443 2>&1