traumatism / smog Goto Github PK

   . .
.+'|=|`+.
|  | `+.|
|  | .
`+.|=|`+.
.    |  |   Smog Framework
|`+. |  |   version 1.2.0
`+.|=|.+'

• git
• Python >= 3.8

• git clone https://github.com/traumatism/Smog/

• cd Smog

• pip3 install -r requirements.txt

• python3 -m smog

• One line: git clone https://github.com/traumatism/Smog/ && cd Smog && pip3 install -r requirements.txt && python3 -m smog

Add a domain for example

• add domain domain.com

Scan for subdomains with differents modules

• use crtsh

• run

• use hackertarget

• run

...

Now lets use the data we gathered to resolve the subdomains to IP addresses

• use resolve

• run

Then we can use another module to gather IP addresses informations

• use ipinfo

• run

Then we can look up for websites

• use urlscan

• run

The process is quasi-infinite. You can add more modules to get more informations and add modules that uses these informations (that why its "semi-automatic", the actions order is decided by the human)

• Endpoints scanning
• Vulnerability scanning

• Key system
• Automatic modules/commands loading