Bheem – Simple Collection Of Small Bash-Scripts Which Runs Iteratively To Carry Out Various Tools And Recon Process

Project Bheem is a simple assortment of compact bash-scripts which runs iteratively to have out numerous resources and recon approach & retailer output in an arranged way. This challenge was produced in the beginning for automation of Recon for particular utilization and was never meant to be general public as there is very little fancy about it but because of to request by local community, Job Bheem is now General public.
Please come to feel free of charge to increase it in any way you can. There is no magic formula sauce concerned and it truly is just a established of commands and current resources composed in bash-scripts for easy Recon Automation.

Venture Bheem Supports an approach of Recon from @harshbothra_’s Scope Primarily based Recon Methodology. At this time this equipment supports doing recon for:

1. Small Scope (single urls in scope) : Performs a limited recon & valuable when only a handful of urls are supplied in scope
2. Medium Scope (*.goal.com in scope) : Performs recon to enumerate more property and give you additional choices to attack on.
3. Big Scope (All the things in Scope) : Performs almost every feasible recon vector from subdomain enumeration to fuzzing.

A couple of options like port scanning may possibly not be doing the job in the existing build and some of the freshly released tools could possibly also be missed. we are performing on upgrading the instrument but truly feel cost-free to fork, improve and make a pull ask for (Make certain that software is not breaking).

A large many thanks to “Kathan Patel” for restructuring Undertaking Bheem to Support Scope Dependent Recon.

Pre-Requisite

1. Make sure to have “Go” hottest variation is put in and paths are accurately set.

Installation

1. Clone the repository
2. Operate the following script to set up necessary tools: sh put in.sh
3. The arsenal listing includes a established of modest scripts utilised to automate Bheem. Give executable permissions to scripts in this directory.
4. Navigate to ~/arsenal directory and Just operate pursuing command to see all the supported choices offered in Bheem:

./Bheem.sh -h

5. To use it around vps for undertaking recon on larger sized set of targets execute pursuing command:

display screen -S ~/arsenal/Bheem.sh -h

6. This will retain Bheem functioning even if the SSH Relationship is terminated or you convert off your community device.

Sample Use

1. Little Scope Recon : Bheem -t targetfile -S
2. Medium Scope Recon : Bheem -t targetfile -M
3. Big Scope Recon : Bheem -t targetfile -L

targetfile consists of listing of domains to accomplish Recon. For instance: targettest.com

Aspect Notes

1. If you really don’t want to use specific module, just remark it out and it is not going to be applied any more.

Tools Made use of

1. Nuclei
2. HTTPX
3. GF & GF-Designs
4. Top secret Finder
5. Heartbleed Oneliner
6. AMASS
7. Subfinder
8. Assetfinder
9. JSScan
10. FavFreak
11. Waybackurls
12. Gau
13. Parallel
14. asnip
15. dirsearch
16. gowitness
17. subjack
18. CORS Scanner
19. git-hound
20. Shuffledns
21. Massdns

~ Other onliners and resources to be added.

PR Notes

1. If there is any GO Variation/Path similar concerns, you should do not develop a PR for it.
2. Be sure to build a PR for the Attribute Ask for.
3. If there is any missing part in set up.sh please generate a PR for it.
4. For distinct device linked concern this sort of as set up for X tool employed by Bheem is not thriving, be sure to do not build a PR for it. As this difficulty is necessary to be Elevate to the distinct Resource Owner.

Potential Ideas/Less than Improvement

1. Incorporating Listing Enumeration 2. Adding Subdomain Bruteforcing 3. Introducing HTTP Desync Scanner 4. Incorporating Susceptible Computer software & Exploit Suggester 5. Incorporating Oneline Scanner for CORS, CRLF & Other Vectors 6. Adding Visual Recon

Specific Many thanks

Each individual single application protection local community member and tool developers. Distinctive Many thanks to:

1. Task Discovery (Httpx, Subfinder, chaos, nuclei)
2. OWASP (Amass)
3. Tomnomnom (Assetfinder, Waybackurls, GF)
4. Devansh (FavFreak)
5. Imran (Heartbleed oneliner)
6. M4ll0k (Top secret Finder)
7. lc (gau)
8. tillson (git-hound)
9. ffuf (ffuf)
10. sensepost (gowitness)
11. defparam (smuggler)
12. haccer (subjack)
13. crt.sh (YashGoti)

Remember to feel free of charge to lead.

Picture and Short article Supply hyperlink

Study Much more on Pentesting Instruments