[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":21,"_132":11,"_133":-5,"_134":11,"_135":-5,"_136":137,"_138":91,"_139":-7},"canonicalUrl","https://hub.docker.com/r/thecyberneh/scriptkiddi3/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","thecyberneh","reponame","scriptkiddi3","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2023-08-13T05:15:21.756149Z","description","SCRIPTKIDDI3, A recon and initial vulnerability detection tool","is_private","last_updated","2024-03-23T11:07:37.844733Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",191,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n
\n $\"SCRIPTKIDDI3\"$ \n

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3,\nA recon and initial vulnerability detection tool built using shell script and open source tools.

\n\n\n

\n $\"Made$ \n

\n\n \n\n
\n \n\n

\n How it works •\n Installation •\n Install with Docker •\n Usage •\n MODES •\n Important Notes | Webhook configurations •\n For Developers •\n Credits \n

\n\n---\n

\n\n \nIntroducing SCRIPTKIDDI3, a powerful recon and initial vulnerability detection tool for Bug Bounty Hunters. Built using a variety of open-source tools and a shell script, SCRIPTKIDDI3 allows you to quickly and efficiently run a scan on the target domain and identify potential vulnerabilities.\n\nSCRIPTKIDDI3 begins by performing recon on the target system, collecting information such as subdomains, and running services with nuclei. It then uses this information to scan for known vulnerabilities and potential attack vectors, alerting you to any high-risk issues that may need to be addressed.\n\nIn addition, SCRIPTKIDDI3 also includes features for identifying misconfigurations and insecure default settings with nuclei templates, helping you ensure that your systems are properly configured and secure.\n\nSCRIPTKIDDI3 is an essential tool for conducting thorough and effective recon and vulnerability assessments.\nLet's Find Bugs with SCRIPTKIDDI3\n\n[Thanks ChatGPT for the Description]\n \n\n--- \n## How it Works ?\nThis tool mainly performs 3 tasks\n1. Effective Subdomain Enumeration from Various Tools\n2. Get URLs with open HTTP and HTTPS service.\n3. Run a Nuclei and other scans on previous output\nSo basically, this is an autmation script for your initial recon in bugbounty\n\n---\n\n## Install SCRIPTKIDDI3\n SCRIPTKIDDI3 requires different tools to run successfully. Run the following command to install the latest version with all requirments-\n\n ```sh\ngit clone https://github.com/thecyberneh/scriptkiddi3.git\ncd scriptkiddi3\nbash installer.sh\n```\n\n### Install with Docker\n\nScriptKiddi3 is now available as a Docker container, allowing users to access and utilize this powerful tool effortlessly on various platforms, including Windows, Linux, and more. This README provides a quick guide on how to get started with the ScriptKiddi3 Docker container.\n\nGet the Docker image of scriptkiddi3\n```sh\ndocker pull thecyberneh/scriptkiddi3:v1\n```\n\nHow to run the Docker image of Scriptkiddi3 ?\n```sh\ndocker run -it thecyberneh/scriptkiddi3:v1 /bin/bash\n```\n\n**You can always check [SCRIPTKIDDI3's Github repository](https://github.com/thecyberneh/scriptkiddi3).**\n\n---\n \n## Usage \n\n```sh\nscriptkiddi3 -h\n```\nThis will display help for the tool. Here are all the switches it supports.\n \n```console\n[ABOUT:]\n Streamline your recon and vulnerability detection process with SCRIPTKIDDI3,\n A recon and initial vulnerability detection tool built using shell script and open source tools.\n\n\n[Usage:]\n scriptkiddi3 [MODE] [FLAGS]\n scriptkiddi3 -m EXP -d target.com -c /path/to/config.yaml\n\n\n[MODES:]\n ['-m'/'--mode']\n Available Options for MODE: \n SUB | sub | SUBDOMAIN | subdomain Run scriptkiddi3 in SUBDOMAIN ENUMERATION mode\n URL | url Run scriptkiddi3 in URL ENUMERATION mode\n EXP | exp | EXPLOIT | exploit Run scriptkiddi3 in Full Exploitation mode\n\n\n Feature of EXPLOI mode : subdomain enumaration, URL Enumeration,\n Vulnerability Detection with Nuclei,\n and Scan for SUBDOMAINE TAKEOVER\n\n[FLAGS:]\n [TARGET:] -d, --domain target domain to scan\n\n [CONFIG:] -c, --config path of your configuration file for subfinder\n\n [HELP:] -h, --help to get help menu \n \n [UPDATE:] -u, --update to update tool\n \n[Examples:]\n Run scriptkiddi3 in full Exploitation mode\n scriptkiddi3 -m EXP -d target.com\n\n\n Use your own CONFIG file for subfinder\n scriptkiddi3 -m EXP -d target.com -c /path/to/config.yaml\n\n\n Run scriptkiddi3 in SUBDOMAIN ENUMERATION mode\n scriptkiddi3 -m SUB -d target.com\n\n\n Run scriptkiddi3 in URL ENUMERATION mode\n scriptkiddi3 -m SUB -d target.com\n\n```\n\n---\n\n\n## MODES \n#### 1. FULL EXPLOITATION MODE
\nRun SCRIPTKIDDI3 in FULL EXPLOITATION MODE\n```sh\n scriptkiddi3 -m EXP -d target.com\n```\n \nFULL EXPLOITATION MODE contains following functions\n- Effective Subdomain Enumeration with different services and open source tools\n- Effective URL Enumeration ( HTTP and HTTPs service )\n- Run Vulnerability Detection with Nuclei\n- Subdomain Takeover Test on previous results\n
\n \n#### 2. SUBDOMAIN ENUMERATION MODE
\nRun scriptkiddi3 in SUBDOMAIN ENUMERATION MODE\n```sh\n scriptkiddi3 -m SUB -d target.com\n```\nSUBDOMAIN ENUMERATION MODE contains following functions\n- Effective Subdomain Enumeration with different services and open source tools\n- You can use this mode if you only want to get subdomains from this tool\n or we can say Automation of Subdmain Enumeration by different tools\n
\n \n#### 3. URL ENUMERATION MODE
\nRun scriptkiddi3 in URL ENUMERATION MODE\n```sh\n scriptkiddi3 -m URL -d target.com\n```\nURL ENUMERATION MODE contains following functions\n - Same Feature as SUBDOMAIN ENUMERATION MODE but also identifies HTTP or HTTPS service\n \nUsing your own CONFIG File for subfinder\n```sh\n scriptkiddi3 -m EXP -d target.com -c /path/to/config.yaml\n```\nYou can also provie your own CONDIF file with your API Keys for subdomain enumeration with subfinder\n \nUpdating tool to latest version\nYou can run following command to update tool\n```sh\n scriptkiddi3 -u\n```\n\nAn Example of config.yaml\n```yaml\nbinaryedge:\n - 0bf8919b-aab9-42e4-9574-d3b639324597\n - ac244e2f-b635-4581-878a-33f4e79a2c13\ncensys:\n - ac244e2f-b635-4581-878a-33f4e79a2c13:dd510d6e-1b6e-4655-83f6-f347b363def9\ncertspotter: []\npassivetotal:\n - sample-email@user.com:sample_password\nsecuritytrails: []\nshodan:\n - AAAAClP1bJJSRMEYJazgwhJKrggRwKA\ngithub:\n - ghp_lkyJGU3jv1xmwk4SDXavrLDJ4dl2pSJMzj4X\n - ghp_gkUuhkIYdQPj13ifH4KA3cXRn8JD2lqir2d4\nzoomeye:\n - zoomeye_username:zoomeye_password\n```\n\n---\n\n## Important Notes | Webhook configurations\n- Scriptkiddi3 is using webhooks to send notifications to your Discord/MSTeam/Telegram and other services, so make sure to configure the web hooks by addind URL of your webhook in \n `/$HOME/.config/notify/provider-config.yaml`\n- The default links will send the notifiction to my (thecyberneh's) discord and MSTeam.\n- You can paste the URL of your own webhook in following `provider-config.yaml` file ( Do not forget to save it in location :- `/$HOME/.config/notify/provider-config.yaml`\n```yaml\nslack:\n - id: \"slack\"\n slack_channel: \"recon\"\n slack_username: \"test\"\n slack_format: \"{{data}}\"\n slack_webhook_url: \"https://hooks.slack.com/services/XXXXXX\"\n\n - id: \"vulns\"\n slack_channel: \"vulns\"\n slack_username: \"test\"\n slack_format: \"{{data}}\"\n slack_webhook_url: \"https://hooks.slack.com/services/XXXXXX\"\n\ndiscord:\n - id: \"crawl\"\n discord_channel: \"crawl\"\n discord_username: \"test\"\n discord_format: \"{{data}}\"\n discord_webhook_url: \"https://discord.com/api/webhooks/XXXXXXXX\"\n\n - id: \"subs\"\n discord_channel: \"subs\"\n discord_username: \"test\"\n discord_format: \"{{data}}\"\n discord_webhook_url: \"https://discord.com/api/webhooks/XXXXXXXX\"\n\ntelegram:\n - id: \"tel\"\n telegram_api_key: \"XXXXXXXXXXXX\"\n telegram_chat_id: \"XXXXXXXX\"\n telegram_format: \"{{data}}\"\n telegram_parsemode: \"Markdown\" # None/Markdown/MarkdownV2/HTML (https://core.telegram.org/bots/api#formatting-options)\n\npushover:\n - id: \"push\"\n pushover_user_key: \"XXXX\"\n pushover_api_token: \"YYYY\"\n pushover_format: \"{{data}}\"\n pushover_devices:\n - \"iphone\"\n\nsmtp:\n - id: email\n smtp_server: mail.example.com\n smtp_username: test@example.com\n smtp_password: password\n from_address: from@email.com\n smtp_cc:\n - to@email.com\n smtp_format: \"{{data}}\"\n subject: \"Email subject\"\n smtp_html: false\n smtp_disable_starttls: false\n\ngooglechat:\n - id: \"gc\"\n key: \"XXXXXXXX\"\n token: \"XXXXXX\"\n space: \"XXXXXX\"\n google_chat_format: \"{{data}}\"\n\nteams:\n - id: \"recon\"\n teams_webhook_url: \"https://.webhook.office.com/webhookb2/xx@xx/IncomingWebhook/xx\"\n teams_format: \"{{data}}\"\n\ncustom:\n - id: webhook\n custom_webhook_url: http://host/api/webhook\n custom_method: GET\n custom_format: '{{data}}'\n custom_headers:\n Content-Type: application/json\n X-Api-Key: XXXXX\n \ncustom:\n - id: webhookJson\n custom_webhook_url: http://host/api/webhook\n custom_method: GET\n custom_format: '{\"text\":{{dataJsonString}} }'\n custom_headers:\n Content-Type: application/json\n X-Api-Key: XXXXX\n\ncustom:\n - id: webhook\n custom_webhook_url: http://host/api/webhook\n custom_method: GET\n custom_sprig: '{\"text\":\"{{ .url }}\"}'\n custom_headers:\n Content-Type: application/json\n X-Api-Key: XXXXX\n```\n\n---\n \n## For Developers\nIf you have ideas for new functionality or modes that you would like to see in this tool, you can always submit a pull request (PR) to contribute your changes.\n \nIf you have any other queries, you can always contact me on Twitter(thecyberneh) \n \n\n## Credits\nI would like to express my gratitude to all of the open source projects that have made this tool possible and have made recon tasks easier to accomplish.\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",2305904615,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_101":102,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":21},"content_type","creator",19561809,"digest","sha256:660cb89f225e223ea15ba0d7869a59cb137913398e7f617b3b0b6f73c12588e2","full_size",2305836094,"id",508090440,"images",[103],{"_104":105,"_95":96,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":98,"_63":66,"_117":-5},"architecture","amd64","features","","last_pulled","2026-09-27T18:35:44.136575315Z","last_pushed","2024-03-23T11:07:38Z","os","linux","os_features","os_version","size","variant","2024-03-23T11:07:37.333729Z","last_updater","last_updater_username","media_type","v1","repository",21245904,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":142,"_149":150,"_136":159,"_160":11},{"_40":143,"_42":144,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":145,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":146,"_79":11,"_80":148,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":147},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_151":64,"_152":-5,"_153":-5,"_154":155},"count","next","previous","results",[156],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_101":157,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":21},[158],{"_104":105,"_95":96,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":98,"_63":66,"_117":-5},[],"canDeleteTags","actionData","errors"]

\n \n \n

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3,\nA recon and initial vulnerability detection tool built using shell script and open source tools.

\n
\n $\"SCRIPTKIDDI3\"$ \n

thecyberneh/scriptkiddi3

Tags for thecyberneh/scriptkiddi3