# Scriptkiddi3 | Streamline Your Recon And Vulnerability Detection Process With SCRIPTKIDDI3 **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, programming, freebies\ **Created:** [April 22, 2023, 12:10am UTC](https://onehack.st/t/scriptkiddi3-streamline-your-recon-and-vulnerability-detection-process-with-scriptkiddi3/238777 "2023-04-22T00:10:22Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Post date:** [April 22, 2023, 12:10am UTC](https://onehack.st/t/scriptkiddi3-streamline-your-recon-and-vulnerability-detection-process-with-scriptkiddi3/238777/1 "2023-04-22T00:10:23Z")
# [![SCRIPTKIDDI3](https://github.com/thecyberneh/scriptkiddi3/raw/main/images/scriptkiddi3Nobg.png)](https://twitter.com/thecyberneh) #### Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. [![](https://camo.githubusercontent.com/0586c2bc7fd94964aaaa98e191c6f98189001a0c0226e38997fadfa4a0a994fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d414445253230494e2d494e4449412d5343524950543f636f6c6f72413d25323366663831303026636f6c6f72423d25323330313765343026636f6c6f72433d253233666630303030267374796c653d666f722d7468652d6261646765 "Made in INDIA")](https://camo.githubusercontent.com/0586c2bc7fd94964aaaa98e191c6f98189001a0c0226e38997fadfa4a0a994fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d414445253230494e2d494e4449412d5343524950543f636f6c6f72413d25323366663831303026636f6c6f72423d25323330313765343026636f6c6f72433d253233666630303030267374796c653d666f722d7468652d6261646765) [![](https://camo.githubusercontent.com/2115d896f08d45aeab8b239dcb1a2a1a7dd9c5e08bd565fdb066d0ccf5037d0d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f646f776e6c6f6164732f74686563796265726e65682f7363726970746b69646469332f746f74616c3f636f6c6f723d677265656e) ](https://github.com/thecyberneh/scriptkiddi3/releases)[![](https://camo.githubusercontent.com/6872197d1364eb75e4f3546f6f41a7cbf6b12c53e722c3078fcda418e3f94a17/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f762f72656c656173652f74686563796265726e65682f7363726970746b69646469333f696e636c7564655f70726572656c6561736573) ](https://github.com/thecyberneh/scriptkiddi3/releases/)[![](https://camo.githubusercontent.com/3afe896f0db6fa161fcd838069c2ea74bf2fade23b2acf054fb8d33b705f6730/68747470733a2f2f696d672e736869656c64732e696f2f747769747465722f666f6c6c6f772f74686563796265726e65683f7374796c653d736f6369616c)](https://twitter.com/thecyberneh) [How it works](https://github.com/thecyberneh/scriptkiddi3#how-it-works-) • [Installation](https://github.com/thecyberneh/scriptkiddi3#install-scriptkiddi3) • [Usage](https://github.com/thecyberneh/scriptkiddi3#usage) • [MODES](https://github.com/thecyberneh/scriptkiddi3#modes) • [For Developers](https://github.com/thecyberneh/scriptkiddi3#for-developers) • [Credits](https://github.com/thecyberneh/scriptkiddi3#credits) * * * Introducing SCRIPTKIDDI3, a powerful recon and initial vulnerability detection tool for Bug Bounty Hunters. Built using a variety of open-source tools and a shell script, SCRIPTKIDDI3 allows you to quickly and efficiently run a scan on the target domain and identify potential vulnerabilities. SCRIPTKIDDI3 begins by performing recon on the target system, collecting information such as subdomains, and running services with nuclei. It then uses this information to scan for known vulnerabilities and potential attack vectors, alerting you to any high-risk issues that may need to be addressed. In addition, SCRIPTKIDDI3 also includes features for identifying misconfigurations and insecure default settings with nuclei templates, helping you ensure that your systems are properly configured and secure. SCRIPTKIDDI3 is an essential tool for conducting thorough and effective recon and vulnerability assessments. Let’s Find Bugs with SCRIPTKIDDI3 [Thanks ChatGPT for the Description] ## How it Works ? This tool mainly performs 3 tasks 1. Effective Subdomain Enumeration from Various Tools 2. Get URLs with open HTTP and HTTPS service. 3. Run a Nuclei and other scans on previous output So basically, this is an autmation script for your initial recon in bugbounty ## Install SCRIPTKIDDI3 SCRIPTKIDDI3 requires different tools to run successfully. Run the following command to install the latest version with all requirments- git clone [https://github.com/thecyberneh/scriptkiddi3.git](https://github.com/thecyberneh/scriptkiddi3.git) cd scriptkiddi3 bash installer.sh ## Usage scriptkiddi3 -h This will display help for the tool. Here are all the switches it supports. [ABOUT:] Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. [Usage:] scriptkiddi3 [MODE] [FLAGS] scriptkiddi3 -m EXP -d [target.com](http://target.com) -c /path/to/config.yaml [MODES:] [‘-m’/‘–mode’] Available Options for MODE: SUB | sub | SUBDOMAIN | subdomain Run scriptkiddi3 in SUBDOMAIN ENUMERATION mode URL | url Run scriptkiddi3 in URL ENUMERATION mode EXP | exp | EXPLOIT | exploit Run scriptkiddi3 in Full Exploitation mode Feature of EXPLOI mode : subdomain enumaration, URL Enumeration, Vulnerability Detection with Nuclei, and Scan for SUBDOMAINE TAKEOVER [FLAGS:] [TARGET:] -d, --domain target domain to scan [CONFIG:] -c, --config path of your configuration file for subfinder [HELP:] -h, --help to get help menu [UPDATE:] -u, --update to update tool [Examples:] Run scriptkiddi3 in full Exploitation mode scriptkiddi3 -m EXP -d [target.com](http://target.com) Use your own CONFIG file for subfinder scriptkiddi3 -m EXP -d [target.com](http://target.com) -c /path/to/config.yaml Run scriptkiddi3 in SUBDOMAIN ENUMERATION mode scriptkiddi3 -m SUB -d [target.com](http://target.com) Run scriptkiddi3 in URL ENUMERATION mode scriptkiddi3 -m SUB -d [target.com](http://target.com) ## MODES ### 1. FULL EXPLOITATION MODE Run SCRIPTKIDDI3 in FULL EXPLOITATION MODE scriptkiddi3 -m EXP -d [target.com](http://target.com) FULL EXPLOITATION MODE contains following functions - Effective Subdomain Enumeration with different services and open source tools - Effective URL Enumeration ( HTTP and HTTPs service ) - Run Vulnerability Detection with Nuclei - Subdomain Takeover Test on previous results ### 2. SUBDOMAIN ENUMERATION MODE Run scriptkiddi3 in SUBDOMAIN ENUMERATION MODE scriptkiddi3 -m SUB -d [target.com](http://target.com) SUBDOMAIN ENUMERATION MODE contains following functions - Effective Subdomain Enumeration with different services and open source tools - You can use this mode if you only want to get subdomains from this tool or we can say Automation of Subdmain Enumeration by different tools ### 3. URL ENUMERATION MODE Run scriptkiddi3 in URL ENUMERATION MODE scriptkiddi3 -m URL -d [target.com](http://target.com) URL ENUMERATION MODE contains following functions - Same Feature as SUBDOMAIN ENUMERATION MODE but also identifies HTTP or HTTPS service Using your own CONFIG File for subfinder scriptkiddi3 -m EXP -d [target.com](http://target.com) -c /path/to/config.yaml You can also provie your own CONDIF file with your API Keys for subdomain enumeration with subfinder Updating tool to latest version You can run following command to update tool scriptkiddi3 -u An Example of config.yaml binaryedge: - 0bf8919b-aab9-42e4-9574-d3b639324597 - ac244e2f-b635-4581-878a-33f4e79a2c13 censys: - ac244e2f-b635-4581-878a-33f4e79a2c13:dd510d6e-1b6e-4655-83f6-f347b363def9 certspotter: passivetotal: - [sample-email@user.com](mailto:sample-email@user.com):sample\_password securitytrails: shodan: - AAAAClP1bJJSRMEYJazgwhJKrggRwKA github: - ghp\_lkyJGU3jv1xmwk4SDXavrLDJ4dl2pSJMzj4X - ghp\_gkUuhkIYdQPj13ifH4KA3cXRn8JD2lqir2d4 zoomeye: - zoomeye\_username:zoomeye\_password ## For Developers If you have ideas for new functionality or modes that you would like to see in this tool, you can always submit a pull request (PR) to contribute your changes. If you have any other queries, you can always contact me on [Twitter(thecyberneh)](https://twitter.com/thecyberneh) ## Credits I would like to express my gratitude to all of the open source projects that have made this tool possible and have made recon tasks easier to accomplish. ## GitHub: [https://github.com/thecyberneh/scriptkiddi3](https://github.com/thecyberneh/scriptkiddi3)