3klCon Project v2.0

Description

New Version <3 Full Automation Recon tool which works with Large and Medium scopes. Recommended to use it on VPS machine, it'll discover secrets and searching for vulnerabilities

So, Welcome and let's deep into it <3

Here is the methedology and Tasks

---

Installation instructions

Befor ANY installation instruction: You MUST be the ROOT user

$ su -

1. You GO version must be go version go1.15.2 linux/amd64 and to check type go version, If it doesn't the same so install the updated version from here

https://www.tecmint.com/install-go-in-linux/
or
https://tzusec.com/how-to-install-golang-in-kali-linux/

2. Check that the GO path in the root direcrory is

/root/go/ NOT /root/go-projects or anything else

3. Install required tools

chmod +x install_tools.sh

./install_tools.sh

4. Running tool

python 3klcon.py -t target.com

---

Required VPS or VMware machine structure

1. In the main directory you should have /root directory and /usr/local/bin
2. In the /root directory you must have /go/bin directory
3. In the tool's directory you will find tools directory after install tools_script

---

Notes

[+] If you face any problem in the running process, check that:

1. You logged in as ROOT user not normal user 
2. Check that you installed the GO language and this path is exist /root/go/bin  

[+] If you face any problem with gf so kindly install it manually from install instructions from here
https://github.com/1ndianl33t/Gf-Patterns

[+] It will take almost 5 ~ 6 hours running so be Patient or use VPS and sleep while running :)

[+] It will collect all the result into one directory with your target name

[+] Some of tools may need your reaction like entering your GitHub's 2FA or username, password, etc.

[+] Go to GitHound tool directory, enter you github_username and github_password info into config.yml

---

Tools useds

1. 3klector https://github.com/eslam3kl/3klector
2. crtfinder https://github.com/eslam3kl/crtfinder
3. Subfinder https://github.com/projectdiscovery/subfinder
4. Assetfinder https://github.com/tomnomnom/assetfinder
5. Altdns https://github.com/infosec-au/altdns
6. Dirsearch https://github.com/maurosoria/dirsearch
7. Httpx https://github.com/projectdiscovery/httpx
8. Waybackurls https://github.com/tomnomnom/waybackurls
9. Gau https://github.com/lc/gau
10. Git-hound https://github.com/tillson/git-hound
11. Gf https://github.com/tomnomnom/gf
12. Gf-pattern https://github.com/1ndianl33t/Gf-Patterns
13. Nuclei https://github.com/projectdiscovery/nuclei
14. Nuclei-templets https://github.com/projectdiscovery/nuclei-templates
15. Subjack https://github.com/haccer/subjack
16. Port_scan.sh
17. Gitdorks.sh

Stay in touch <3

LinkedIn > https://www.linkedin.com/in/eslam-akl-6b998614a/
Blog > https://eslam3kl.medium.com/
Mail > [email protected]