Website OSINT Tools

Subfinder:

subfinder -d tcm-sec.com

assetfinder:

assetfinder tcm-sec.com
#to save it to an output file:
assetfinder tcm-sec.com > tcm-sec.txt

to count how many assetfinder found in that text file:

wc -l tcm-sec.txt

(this is EL not EYE)

find admin links:

cat tcm-sec.txt | grep adm

could also look for:

amass:

amass enum -d tcm-sec.com

httprobe:

cat tcm-sec.txt | httprobe -s -p https:443

gowitness:

grab the alive links and put them in txt then:

ctrl+R
https://
#spam click replace until red
:443
#same

command line kung fu:

Run it:

gowitness file -f ./tcm-secS.txt -P domainpicsyuh --no-http