编写你自己的信息收集脚本1

#!/bin/bashnmap scanme.nmap.org/PATH/TO/dirsearch.py -u scanme.nmap.org -e php

#!/bin/bashnmap $1/PATH/TO/dirsearch.py -u $1 -e php

export PATH="PATH_TO_DIRSEARCH:$PATH"

#!/bin/bashnmap $1dirsearch.py -u $1 -e php

$ ./recon.sh

permission denied: ./recon.sh

$ chmod +x recon.sh

$ chmod 700 recon.sh

PROGRAM > FILENAME   将程序的输出写入与FILENAME同名的文件中。 (它将首先清除文件中的所有内容。如果该文件还不存在，那么它将创建该文件。)PROGRAM >> FILENAME  将程序的输出附加到文件的结尾，而不清除文件的原始内容。PROGRAM < FILENAME   从文件中读取，并使用其内容作为程序输入。PROGRAM1 | PROGRAM2  使用PROGRAM1的输出作为PROGRAM2的输入。

#!/bin/bashecho "Creating directory $1_recon." 【1】mkdir $1_recon 【2】nmap $1 > $1_recon/nmap 【3】echo "The results of nmap scan are stored in $1_recon/nmap."/PATH/TO/dirsearch.py -u $1 -e php 【4】 --simple-report=$1_recon/dirsearchecho "The results of dirsearch scan are stored in $1_recon/dirsearch."

#!/bin/bashPATH_TO_DIRSEARCH="/Users/vickieli/tools/dirsearch"DOMAIN=$1DIRECTORY=${DOMAIN}_recon 【1】echo "Creating directory $DIRECTORY."mkdir $DIRECTORYnmap $DOMAIN > $DIRECTORY/nmapecho "The results of nmap scan are stored in $DIRECTORY/nmap."$PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php –simple-report=$DIRECTORY/dirsearch 【2】echo "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."

#!/bin/bashPATH_TO_DIRSEARCH="/Users/vickieli/tools/dirsearch"TODAY=$(date) 【1】echo "This scan was created on $TODAY" 【2】DOMAIN=$1DIRECTORY=${DOMAIN}_reconecho "Creating directory $DIRECTORY."mkdir $DIRECTORYnmap $DOMAIN > $DIRECTORY/nmapecho "The results of nmap scan are stored in $DIRECTORY/nmap."$PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php --simple-report=$DIRECTORY/dirsearchecho "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."

if [ condition 1 ]then    # 如果条件1被满足则运行elif [ condition 2 ]then    # 如果条件2满足且条件1不满足则运行else    # 如果条件1和条件2都不满足则运行fi

$ ./recon.sh scanmme.nmap.org MODE

#!/bin/bashPATH_TO_DIRSEARCH="/Users/vickieli/tools/dirsearch"TODAY=$(date)echo "This scan was created on $TODAY"DOMAIN=$1DIRECTORY=${DOMAIN}_recon  #作者写的脚本有问题，此处的domain应该是从$1接收的，但是作者忘了写这行，本文已修改此错误echo "Creating directory $DIRECTORY."mkdir $DIRECTORY if [ $2 == "nmap-only" ] 【1】then  nmap $DOMAIN > $DIRECTORY/nmap 【2】  echo "The results of nmap scan are stored in $DIRECTORY/nmap."elif [ $2 == "dirsearch-only" ] 【3】then   $PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php –simple-report=$DIRECTORY/dirsearch 【4】  echo "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."else 【5】  nmap $DOMAIN > $DIRECTORY/nmap 【6】  echo "The results of nmap scan are stored in $DIRECTORY/nmap."  $PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php --simple-report=$DIRECTORY/dirsearch  echo "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."fi

$ ./recon.sh scanme.nmap.org nmap-only$ ./recon.sh scanme.nmap.org dirsearch-only

$ ./recon.sh scanme.nmap.org nmap-only$ ./recon.sh scanme.nmap.org dirsearch-only$ ./recon.sh scanme.nmap.org crt-only

case $VARIABLE_NAME in  case1)     Do something     ;;  case2)     Do something     ;;   caseN)     Do something     ;;  *)      #默认情况下，如果没有其他情况相匹配，则执行此情况。     ;; esac

#!/bin/bashPATH_TO_DIRSEARCH="/Users/vickieli/tools/dirsearch"TODAY=$(date)echo "This scan was created on $TODAY"DOMAIN=$1DIRECTORY=${DOMAIN}_reconecho "Creating directory $DIRECTORY."mkdir $DIRECTORYcase $2 in    nmap-only)    nmap $DOMAIN > $DIRECTORY/nmap    echo "The results of nmap scan are stored in $DIRECTORY/nmap."    ;; dirsearch-only)    $PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php --simple-report=$DIRECTORY/dirsearch    echo "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."    ;;  crt-only)     curl "https://crt.sh/?q=$DOMAIN&output=json" -o $DIRECTORY/crt 【1】    echo "The results of cert parsing is stored in $DIRECTORY/crt."    ;; *)    nmap $DOMAIN > $DIRECTORY/nmap    echo "The results of nmap scan are stored in $DIRECTORY/nmap."    $PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php --simple-report=$DIRECTORY/dirsearch    echo "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."    curl "https://crt.sh/?q=$DOMAIN&output=json" -o $DIRECTORY/crt    echo "The results of cert parsing is stored in $DIRECTORY/crt."    ;;esac

FUNCTION_NAME(){ DO_SOMETHING}

#!/bin/bashPATH_TO_DIRSEARCH="/Users/vickieli/tools/dirsearch"TODAY=$(date)echo "This scan was created on $TODAY"DOMAIN=$1DIRECTORY=${DOMAIN}_reconecho "Creating directory $DIRECTORY."mkdir $DIRECTORYnmap_scan() 【1】{ nmap $DOMAIN > $DIRECTORY/nmap echo "The results of nmap scan are stored in $DIRECTORY/nmap."}dirsearch_scan() 【2】{ $PATH_TO_DIRSEARCH/dirsearch.py -u $DOMAIN -e php --simple-report=$DIRECTORY/dirsearch echo "The results of dirsearch scan are stored in $DIRECTORY/dirsearch."}crt_scan() 【3】{ curl "https://crt.sh/?q=$DOMAIN&output=json" -o $DIRECTORY/crt echo "The results of cert parsing is stored in $DIRECTORY/crt."}case $2 in 【4】 nmap-only)  nmap_scan  ;; dirsearch-only)  dirsearch_scan  ;;  crt-only)   crt_scan  ;; *)   nmap_scan  dirsearch_scan  crt_scan  ;; esac

nmap_scan(){ nmap $1 > $DIRECTORY/nmap  echo "The results of nmap scan are stored in $DIRECTORY/nmap."}nmap_scan