Merge pull request #422 from benemohamed/master

Added tomba.io API integration to recon mode scans
2023-07-21 08:06:33 -07:00
parent 31dcb606e4 23a8c393d4
commit bdb35d849a
15 changed files with 77 additions and 1 deletions
--- a/conf/bug_bounty_full_brute
+++ b/conf/bug_bounty_full_brute
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/bug_bounty_max_javascript_files
+++ b/conf/bug_bounty_max_javascript_files
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/bug_bounty_quick
+++ b/conf/bug_bounty_quick
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/bug_bounty_quick_port_80_443_only
+++ b/conf/bug_bounty_quick_port_80_443_only
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/deep_active_recon
+++ b/conf/deep_active_recon
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -142,6 +146,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
+TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
--- a/conf/default
+++ b/conf/default
@@ -64,6 +64,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -168,6 +172,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -180,7 +185,7 @@ URLSCANIO="1"
 # DYNAMIC APPLICATION SCANNERS
 BURP_SCAN="0"
 ARACHNI_SCAN="0"
-ZAP_SCAN="0"
+ZAP_SCAN="1"

 # ACTIVE WEB PLUGINS
 SC0PE_VULNERABLITY_SCANNER="1"
--- a/conf/fast_service_portscan
+++ b/conf/fast_service_portscan
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -142,6 +146,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
+TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
--- a/conf/super_stealth_mode
+++ b/conf/super_stealth_mode
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/super_stealth_mode_OSINT
+++ b/conf/super_stealth_mode_OSINT
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
+TOMBAIO="1"
 INTODNS="0"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
--- a/conf/web_mode_all_plugins
+++ b/conf/web_mode_all_plugins
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
+TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
--- a/conf/webpwn_only
+++ b/conf/webpwn_only
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="0"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/webpwn_only_metasploit_disabled
+++ b/conf/webpwn_only_metasploit_disabled
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -138,6 +142,7 @@ INURLBR="0"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
--- a/conf/zap_only_webscan
+++ b/conf/zap_only_webscan
@@ -55,6 +55,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -142,6 +146,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
+TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
--- a/modes/osint.sh
+++ b/modes/osint.sh
@@ -94,6 +94,12 @@ if [[ "$OSINT" = "1" ]]; then
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
 		curl -s "https://api.hunter.io/v2/domain-search?domain=$TARGET&api_key=$HUNTERIO_KEY" | egrep "name|value|domain|company|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/hunterio-$TARGET.txt 2> /dev/null
 	fi
+	if [[ "$TOMBAIO" == "1" ]]; then
+		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
+		echo -e "$OKRED GATHERING EMAILS VIA TOMBA.IO $RESET"
+		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
+		curl -H "X-Tomba-Key: $TOMBAIO_KEY" -H "X-Tomba-Secret: $TOMBAIO_SECRET" -s "https://api.tomba.io/v1/domain-search?domain=$TARGET" | egrep "email|organization|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/tombaio$TARGET.txt 2> /dev/null
+	fi
 	if [[ "$METASPLOIT_EXPLOIT" == "1" ]]; then
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
 		echo -e "$OKRED GATHERING EMAILS VIA METASPLOIT $RESET"
--- a/sniper.conf
+++ b/sniper.conf
@@ -66,6 +66,10 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""

+# TOMBA.IO API
+TOMBAIO_KEY=""
+TOMBAIO_SECRET=""
+
 # GITHUB API KEY
 GITHUB_API_KEY=""

@@ -173,6 +177,7 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="0"
+TOMBAIO="0"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"