Subfinder:
subfinder -d tcm-sec.com
assetfinder:
assetfinder tcm-sec.com
#to save it to an output file:
assetfinder tcm-sec.com > tcm-sec.txt
to count how many assetfinder found in that text file:
wc -l tcm-sec.txt
(this is EL not EYE)
find admin links:
cat tcm-sec.txt | grep adm
could also look for:
- api, vpn, cpanel, dev
amass:
amass enum -d tcm-sec.com
httprobe:
cat tcm-sec.txt | httprobe -s -p https:443
gowitness:
grab the alive links and put them in txt then:
ctrl+R
https://
#spam click replace until red
:443
#same
command line kung fu:
Run it:
gowitness file -f ./tcm-secs.txt -P dpicsyuh --no-http