**Obtener urls del gobierno Israelí buscando en google con gov site:.il y guardar los enlaces en un fichero gov_il.txt** cat gov_il.txt | sed -n '1p' https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.gov.il/es **se ven así y hay que quitar lo que no sirve, que es todo menos la web, el protocolo http tambien hay que quitarlo y tal vez algunos enlaces repetidos con sort y uniq:**\\ cat gov_il.txt | grep -Eio '([a-z]+\.){2,4}il' | sort | uniq > gov_il_urls.txt **Ya tenemos las urls correctamente guardadas y partiendo de ellas se pueden obtener sus subdominios, ips y tal vez más información con recon-ng**\\ cat gov_il_urls.txt ags.iplan.gov.il aviv.gov.il basma.muni.il bechirot.gov.il bus.gov.il call.gov.il campus.gov.il catalog.archives.gov.il clinic.gov.il consularappointment.mfa.gov.il corona.health.gov.il data.gov.il embassies.gov.il english.mod.gov.il export.gov.il gemelnet.cma.gov.il geo.mot.gov.il govextra.gov.il govisit.gov.il gpophoto.gov.il hadshon.edu.gov.il harb.cma.gov.il hly.gov.il htmag.co.il ica.justice.gov.il img.haarets.co.il ims.gov.il info.data.gov.il innovationisrael.org.il ipa.mednet.co.il israelpatents.justice.gov.il itrade.gov.il itur.mof.gov.il jet.gov.il kids.gov.il links.responder.co.il login.gov.il mashav.mfa.gov.il merkava.mrp.gov.il mgk.eca.gov.il m.knesset.gov.il mr.gov.il mybenefits.gov.il new.embassies.gov.il portal.piba.gov.il primo.bgu.ac.il rama.edu.gov.il rotenberglaw.co.il scholar.google.co.il schools.ort.org.il secapp.taxes.gov.il secure.hymc.gov.il shkifut.education.gov.il somalia.org.il students.education.gov.il supreme.court.gov.il takam.mof.gov.il www.adi.gov.il www.agri.gov.il www.ashra.gov.il www.barzilaimc.org.il www.btl.gov.il www.cbs.gov.il www.cob.co.il www.cognetica.co.il www.court.gov.il www.dira.moch.gov.il www.eventim.co.il www.gov.il www.govmap.gov.il www.haolam.co.il www.iaa.gov.il www.iibr.gov.il www.izkor.gov.il www.jda.gov.il www.lapam.gov.il www.mevaker.gov.il www.mod.gov.il www.mossad.gov.il www.mr.gov.il www.my.gov.il www.nadlan.gov.il www.new.isa.gov.il www.otsamiel.org.il www.president.gov.il www.runi.ac.il www.shabak.gov.il www.space.gov.il www.taasuka.gov.il www.topocad.gov.il **crea el siguiente script para automatizar la tarea y no tener que ir enlace por enlace con recon-ng**\\ vim script_israel.sh copia y pega el siguiente código en vim (i, ctrl + may + v) #! /bin/bash # Crea el archivo commands_il echo "workspaces load israel" > commands_il echo "modules load recon/domains-hosts/hackertarget" >> commands_il # Iterar sobre cada dominio en gov_il_urls.txt while read domain; do echo "options set SOURCE $domain" >> commands_il echo "run" >> commands_il done < gov_il_urls.txt :wq (guardar y salir de vim) **Da permiso de ejecución al script**\\ chmod + x script_israel.sh\\ **Genera el fichero de comandos para recon-ng a través del script**\\ ./script_israel.sh\\ **Crea el espacio de trabajo israel en recon-ng**\\ workspaces create israel\\ **después ejecuta el siguiente comando para que recon-ng lea el fichero de comandos:**\\ recon-ng -r /home/usuario/israel/commands_il (ruta absoluta)\\ [recon-ng][israel] > show hosts [recon-ng][israel] > spool start /home/usuario/volcado_il.txt (a partir de ahora todos los resultados de los comandos se guardarán en el fichero volcado_il.txt) [recon-ng][israel] > [recon-ng][israel] > show hosts [recon-ng][israel] > spool stop [*]Spooling stopped. Output saved to '/home/usuario/volcado_il.txt'. [recon-ng][israel] > cat volcado_il.txt | grep -Eo '[a-z].*+\.il|([0-9]{1,3}\.){3}[0-9]{1,3}' | sed '/.*/ {N; s/\n/ /}' | sort -k2 | column -t > url_ip_il.txt cat url_ip_il.txt www.htmag.co.il 104.26.2.31 www.stage.campus.gov.il 108.138.128.5 stage.campus.gov.il 108.139.10.94 itrade.gov.il 108.156.107.18 www.export.gov.il 128.65.223.24 staging.campus.gov.il 13.35.93.129 meter.htmag.co.il 142.251.46.211 passkey.st.login.gov.il 147.237.10.231 passkey.t.login.gov.il 147.237.10.232 e.old.govextra.gov.il 147.237.10.70 ica.justice.gov.il 147.237.10.72 bid.mr.gov.il 147.237.10.94 merkava.mrp.gov.il 147.237.11.11 govisit.gov.il 147.237.11.166 cdnnew.govextra.gov.il 147.237.11.169 st.login.gov.il 147.237.11.193 my.govisit.gov.il 147.237.11.239 harb.cma.gov.il 147.237.1.188 api.ims.gov.il 147.237.1.222 mgk.eca.gov.il 147.237.1.224 consularappointment.mfa.gov.il 147.237.1.226 bechirot.gov.il 147.237.12.28 tiles.ims.gov.il 147.237.1.25 websocket-poc.login.gov.il 147.237.12.84 www.hly.gov.il 147.237.2.103 itur.mof.gov.il 147.237.2.107 israelpatents.justice.gov.il 147.237.2.115 www.mr.gov.il 147.237.2.151 t.login.gov.il 147.237.2.159 www.ims.gov.il 147.237.2.161 geo.mot.gov.il 147.237.2.171 login.gov.il 147.237.2.176 votes21.bechirot.gov.il 147.237.2.204 media21.bechirot.gov.il 147.237.2.205 media22.bechirot.gov.il 147.237.2.236 votes22.bechirot.gov.il 147.237.2.237 www.call.gov.il 147.237.2.245 gemelnet.cma.gov.il 147.237.2.30 ags.iplan.gov.il 147.237.2.84 votes24.bechirot.gov.il 147.237.3.108 media23.bechirot.gov.il 147.237.3.11 votes23.bechirot.gov.il 147.237.3.12 votes25.bechirot.gov.il 147.237.3.206 new.embassies.gov.il 147.237.3.224 bechirot21.bechirot.gov.il 147.237.3.58 bechirot22.bechirot.gov.il 147.237.3.58 bechirot23.bechirot.gov.il 147.237.3.58 bechirot24.bechirot.gov.il 147.237.3.58 embassies.gov.il 147.237.3.58 p.geo.mot.gov.il 147.237.3.77 sys.mybenefits.gov.il 147.237.3.92 e.embassies.gov.il 147.237.77.224 www.embassies.gov.il 147.237.77.225 www.gpophoto.gov.il 147.237.77.58 eportal-new13.govextra.gov.il 147.237.8.138 e-new13-scportal.govextra.gov.il 147.237.8.139 new13-scportal.govextra.gov.il 147.237.8.140 www.mashav.mfa.gov.il 147.237.8.231 new13.govextra.gov.il 147.237.9.73 e.old8.govextra.gov.il 147.237.9.74 img.haarets.co.il 151.101.194.132 p.e.innovationisrael.org.il 159.92.129.168 mta.e.innovationisrael.org.il 159.92.162.123 www.innovationisrael.org.il 172.67.172.161 innovationisrael.org.il 172.67.73.53 htmag.co.il 172.67.74.46 scholar.google.co.il 173.194.195.99 development.campus.gov.il 18.155.202.45 govextra.gov.il 18.160.200.108 credentials.campus.gov.il 18.173.132.15 test.innovationisrael.org.il 18.185.52.239 old.innovationisrael.org.il 18.196.217.100 prod.campus.gov.il 18.238.49.54 www.campus.gov.il 18.244.214.92 kindergarten.basma.muni.il 185.37.149.254 www.basma.muni.il 185.37.149.254 crm.basma.muni.il 185.70.250.140 lp.export.gov.il 185.97.145.92 hadshon.edu.gov.il 192.115.100.213 gateway.export.gov.il 192.116.219.1 moses.export.gov.il 192.116.219.10 yogev.export.gov.il 192.116.219.11 milstein.export.gov.il 192.116.219.12 ramati2.export.gov.il 192.116.219.13 hayek.export.gov.il 192.116.219.14 mail1.export.gov.il 192.116.219.149 amalka.export.gov.il 192.116.219.15 nogag.export.gov.il 192.116.219.16 perry.export.gov.il 192.116.219.17 kogel.export.gov.il 192.116.219.18 library.export.gov.il 192.116.219.20 kiriati.export.gov.il 192.116.219.21 perel.export.gov.il 192.116.219.22 yair.export.gov.il 192.116.219.23 bednarski.export.gov.il 192.116.219.24 pama.export.gov.il 192.116.219.25 mmalka.export.gov.il 192.116.219.26 rozen.export.gov.il 192.116.219.27 levine.export.gov.il 192.116.219.28 bloch.export.gov.il 192.116.219.29 snyder.export.gov.il 192.116.219.3 knafo.export.gov.il 192.116.219.30 zissman.export.gov.il 192.116.219.31 tzahor.export.gov.il 192.116.219.32 barnai.export.gov.il 192.116.219.33 fradkin.export.gov.il 192.116.219.34 korazim.export.gov.il 192.116.219.35 pama2.export.gov.il 192.116.219.36 portnoy.export.gov.il 192.116.219.37 transprt.export.gov.il 192.116.219.38 economic.export.gov.il 192.116.219.39 ramati.export.gov.il 192.116.219.4 sternfld.export.gov.il 192.116.219.40 library2.export.gov.il 192.116.219.41 erez.export.gov.il 192.116.219.42 safrai.export.gov.il 192.116.219.43 kney-tal.export.gov.il 192.116.219.44 amado.export.gov.il 192.116.219.45 library3.export.gov.il 192.116.219.49 machon.export.gov.il 192.116.219.5 mail.export.gov.il 192.116.219.5 israeli.export.gov.il 192.116.219.50 toren.export.gov.il 192.116.219.6 shaul.export.gov.il 192.116.219.7 eytan.export.gov.il 192.116.219.8 relayz.ims.gov.il 192.117.139.115 mail.bus.gov.il 194.90.113.3 ipa.mednet.co.il 195.189.141.28 relayn.ims.gov.il 199.203.58.15 primo.bgu.ac.il 216.147.214.138 portal.campus.gov.il 23.236.62.147 israel.kids.gov.il 31.168.175.58 myapitest.innovationisrael.org.il 3.121.90.52 pre-prod.admin.innovationisrael.org.il 3.121.90.52 pre-prod.bodkim.innovationisrael.org.il 3.121.90.52 pre-prod.my.innovationisrael.org.il 3.121.90.52 dashboard.innovationisrael.org.il 3.124.153.18 staging.innovationisrael.org.il 3.124.153.18 stag.innovationisrael.org.il 3.124.153.18 test-wizard.innovationisrael.org.il 3.124.153.18 info.data.gov.il 3.167.183.113 campus.gov.il 3.169.149.110 notes.campus.gov.il 3.169.183.41 courses.campus.gov.il 3.169.183.68 preview.campus.gov.il 3.169.183.68 studio.campus.gov.il 3.169.183.96 prodtmp.campus.gov.il 3.171.139.58 cms.palm-aspects.campus.gov.il 3.249.103.107 lms.palm-aspects.campus.gov.il 3.249.103.107 mybenefits.gov.il 34.111.22.143 m.knesset.gov.il 34.120.123.178 rama.edu.gov.il 34.202.203.47 www.jet.gov.il 34.204.223.211 apps.aspects.stage.campus.gov.il 34.244.113.90 aspects.stage.campus.gov.il 34.244.113.90 studio.aspects.stage.campus.gov.il 34.244.113.90 superset.aspects.stage.campus.gov.il 34.244.113.90 t.data.gov.il 34.96.85.58 et.data.gov.il 34.98.90.157 www.data.gov.il 35.186.245.19 schools.ort.org.il 35.190.7.149 e.data.gov.il 35.227.231.125 bus.gov.il 45.60.1.95 english.mod.gov.il 45.60.31.88 mail.basma.muni.il 5.100.249.241 corona.health.gov.il 51.137.26.7 catalog.archives.gov.il 51.17.17.198 courses.ginkgo.campus.gov.il 52.212.160.193 studio.ginkgo.campus.gov.il 52.212.160.193 preprod.campus.gov.il 52.51.39.220 newsite.export.gov.il 62.128.39.219 preprod.export.gov.il 62.128.39.220 reprod.export.gov.il 62.128.39.220 mail.rotenberglaw.co.il 62.219.78.148 www.rotenberglaw.co.il 62.90.118.228 mail.htmag.co.il 62.90.141.50 links.responder.co.il 63.35.13.206 courses.stage.campus.gov.il 65.8.161.113 secapp.taxes.gov.il 84.110.103.8 mail.innovationisrael.org.il 91.143.232.238 admin.innovationisrael.org.il 99.83.201.3 bodkim.innovationisrael.org.il 99.83.201.3 myapi2.innovationisrael.org.il 99.83.201.3 myapi.innovationisrael.org.il 99.83.201.3 sub.innovationisrael.org.il 99.83.201.3 {{ :israel:urls_ips_il_recon_ng.tar.gz |}}\\ **....continuará**