- SubDomain Recon.
- Finding IP's from Domains and Subdomains.
- Finding Live with unique open ports.
- Finding open ports.
- Directory Brute forcing and Web crawling.
- Parameter crawling.
- Pattern matching (RCE,IDOR,SQLI,SSRF,SSTI,Open Redirect and More).
- Direct Server download link for zip file Mac-Link
- Github Releases download link for zip file Mac-Link
- unzip it
- move it to application folder
$ pip install pysqlite
$ pip3 install pysqlite
$ pip install fastapi
$ pip install "uvicorn[standard]"
$ pip3 install fastapi
$ pip3 install "uvicorn[standard]"
$ pip install Jinja2
$ pip3 install Jinja2
$ mkdir ~/tools && cd ~/tools
$ git clone https://github.com/karthi-the-hacker/Gh0stR3c0n.git
$ cd Gh0stR3c0n/
$ chmod +x *
$ nano back-end/config.env
$ ./run.bash
- Direct Server download link for zip file Linux-deb-Link
- Github Releases download link for zip file Linux-deb-Link
- Direct Server download link for zip file Linux-Source-Link
- Github Releases download link for zip file Linux-Source-Link
- If you downloaded Linux source unzip it
- If you downloades deb file open the terminal and enter the following commands
$ sudo dpkg -i gh0str3con_1.0.0_amd64.deb
$ tar -xf gh0str3con-1.0.0-source-linux.tar.xz
$ pip install pysqlite
$ pip3 install pysqlite
$ pip install fastapi
$ pip install "uvicorn[standard]"
$ pip3 install fastapi
$ pip3 install "uvicorn[standard]"
$ pip install Jinja2
$ pip3 install Jinja2
$ mkdir ~/tools && cd ~/tools
$ git clone https://github.com/karthi-the-hacker/Gh0stR3c0n.git
$ cd Gh0stR3c0n/
$ chmod +x *
$ nano back-end/config.env
$ ./run.bash
- Dont forgot to add your github token in config.env
- By default some tools set in false if you want to make run change that value to true
gobuster='false'
change to
gobuster='true'
github_token='your token'
from_email_username='not required'
from_email_password='not required'
to_email='not required'
v_1l03t='flase'
a_mass='false'
gobuster='false'
dirsearch='false'
eyewitness='false'