Information Gathering

Scilla – Information Gathering Tool (DNS/Subdomain/Port Enumeration)

Scilla - Information Gathering Tool (DNS/Subdomain/Port Enumeration)

[sc name=”ad_1″]

Information Gathering Tool – Dns/Subdomain/Port Enumeration

Installation

First of all, clone the repo locally

git clone https://github.com/edoardottt/scilla.git

Scilla has external dependencies, so they need to be pulled in:

go get

Working on installation… See the open issue.

For now you can run it inside the scilla folder with go run scilla.go ...

Too late.. : see this

Then use the build scripts:

  • make windows builds 32 and 64 bit binaries for Windows, and writes them to the build subfolder.
  • make linux builds 32 and 64 bit binaries for Linux, and writes them to the build subfolder.
  • make unlinux Removes binaries.
  • make fmt run the golang formatter.
  • make update Update.
  • make remod Remod.
  • make test runs the tests.
  • make clean clears out the build subfolder.

Get Started

scilla help prints the help in the command line.

usage: scilla [subcommand] { options }
Available subcommands:
- dns { -target <target (URL)> REQUIRED}
- subdomain { -target <target (URL)> REQUIRED}
- port { [-p <start-end>] -target <target (URL/IP)> REQUIRED}
- report { [-p <start-end>] -target <target (URL/IP)> REQUIRED}
- help

Examples

  • DNS enumeration scilla dns -target target.domain
  • Subdomain enumeration scilla subdomain -target target.domain
  • Port enumeration:
    • Default (all ports, so 1-65635) scilla port -target target.domain
    • Specifying ports range scilla port -p 20-90 -target target.domain
    • Specifying starting port (until the last one) scilla port -p 20- -target target.domain
    • Specifying ending port (from the first one) scilla port -p -90 -target target.domain
    • Specifying single port scilla port -p 80 -target target.domain
  • Full report:
    • Default (all ports, so 1-65635) scilla report -target target.domain
    • Specifying ports range scilla report -p 20-90 -target target.domain
    • Specifying starting port (until the last one) scilla report -p 20- -target target.domain
    • Specifying ending port (from the first one) scilla report -p -90 -target target.domain
    • Specifying single port scilla report -p 80 -target target.domain

 

 


[sc name=”ad-in-article”]