Wiki

Obtener urls del gobierno Israelí buscando en google con gov site:.il y guardar los enlaces en un fichero gov_il.txt

cat gov_il.txt | sed -n '1p'
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.gov.il/es

se ven así y hay que quitar lo que no sirve, que es todo menos la web, el protocolo http tambien hay que quitarlo y tal vez algunos enlaces repetidos con sort y uniq:

cat gov_il.txt | grep -Eio '([a-z]+\.){2,4}il' | sort | uniq > gov_il_urls.txt

Ya tenemos las urls correctamente guardadas y partiendo de ellas se pueden obtener sus subdominios, ips y tal vez más información con recon-ng

cat gov_il_urls.txt 
ags.iplan.gov.il
aviv.gov.il
basma.muni.il
bechirot.gov.il
bus.gov.il
call.gov.il
campus.gov.il
catalog.archives.gov.il
clinic.gov.il
consularappointment.mfa.gov.il
corona.health.gov.il
data.gov.il
embassies.gov.il
english.mod.gov.il
export.gov.il
gemelnet.cma.gov.il
geo.mot.gov.il
govextra.gov.il
govisit.gov.il
gpophoto.gov.il
hadshon.edu.gov.il
harb.cma.gov.il
hly.gov.il
htmag.co.il
ica.justice.gov.il
img.haarets.co.il
ims.gov.il
info.data.gov.il
innovationisrael.org.il
ipa.mednet.co.il
israelpatents.justice.gov.il
itrade.gov.il
itur.mof.gov.il
jet.gov.il
kids.gov.il
links.responder.co.il
login.gov.il
mashav.mfa.gov.il
merkava.mrp.gov.il
mgk.eca.gov.il
m.knesset.gov.il
mr.gov.il
mybenefits.gov.il
new.embassies.gov.il
portal.piba.gov.il
primo.bgu.ac.il
rama.edu.gov.il
rotenberglaw.co.il
scholar.google.co.il
schools.ort.org.il
secapp.taxes.gov.il
secure.hymc.gov.il
shkifut.education.gov.il
somalia.org.il
students.education.gov.il
supreme.court.gov.il
takam.mof.gov.il
www.adi.gov.il
www.agri.gov.il
www.ashra.gov.il
www.barzilaimc.org.il
www.btl.gov.il
www.cbs.gov.il
www.cob.co.il
www.cognetica.co.il
www.court.gov.il
www.dira.moch.gov.il
www.eventim.co.il
www.gov.il
www.govmap.gov.il
www.haolam.co.il
www.iaa.gov.il
www.iibr.gov.il
www.izkor.gov.il
www.jda.gov.il
www.lapam.gov.il
www.mevaker.gov.il
www.mod.gov.il
www.mossad.gov.il
www.mr.gov.il
www.my.gov.il
www.nadlan.gov.il
www.new.isa.gov.il
www.otsamiel.org.il
www.president.gov.il
www.runi.ac.il
www.shabak.gov.il
www.space.gov.il
www.taasuka.gov.il
www.topocad.gov.il

crea el siguiente script para automatizar la tarea y no tener que ir enlace por enlace con recon-ng

vim script_israel.sh
copia y pega el siguiente código en vim (i, ctrl + may + v)
#! /bin/bash
 
# Crea el archivo commands_il
echo "workspaces load israel" > commands_il
echo "modules load recon/domains-hosts/hackertarget" >> commands_il
 
# Iterar sobre cada dominio en gov_il_urls.txt
while read domain; do
  echo "options set SOURCE $domain" >> commands_il
  echo "run" >> commands_il
done < gov_il_urls.txt
 
:wq (guardar y salir de vim)

Da permiso de ejecución al script
chmod + x script_israel.sh
Genera el fichero de comandos para recon-ng a través del script
./script_israel.sh
Crea el espacio de trabajo israel en recon-ng
workspaces create israel
después ejecuta el siguiente comando para que recon-ng lea el fichero de comandos:
recon-ng -r /home/usuario/israel/commands_il (ruta absoluta)

[recon-ng][israel] > show hosts
[recon-ng][israel] > spool start /home/usuario/volcado_il.txt (a partir de ahora
 todos los resultados de los comandos se guardarán en el fichero volcado_il.txt)
[recon-ng][israel] > 
[recon-ng][israel] > show hosts
[recon-ng][israel] > spool stop
[*]Spooling stopped. Output saved to '/home/usuario/volcado_il.txt'.
[recon-ng][israel] > 

cat volcado_il.txt | grep -Eo '[a-z].*+\.il|([0-9]{1,3}\.){3}[0-9]{1,3}' | sed '/.*/ {N; s/\n/ /}' | sort -k2 | column -t > url_ip_il.txt

cat url_ip_il.txt 
www.htmag.co.il                          104.26.2.31
www.stage.campus.gov.il                  108.138.128.5
stage.campus.gov.il                      108.139.10.94
itrade.gov.il                            108.156.107.18
www.export.gov.il                        128.65.223.24
staging.campus.gov.il                    13.35.93.129
meter.htmag.co.il                        142.251.46.211
passkey.st.login.gov.il                  147.237.10.231
passkey.t.login.gov.il                   147.237.10.232
e.old.govextra.gov.il                    147.237.10.70
ica.justice.gov.il                       147.237.10.72
bid.mr.gov.il                            147.237.10.94
merkava.mrp.gov.il                       147.237.11.11
govisit.gov.il                           147.237.11.166
cdnnew.govextra.gov.il                   147.237.11.169
st.login.gov.il                          147.237.11.193
my.govisit.gov.il                        147.237.11.239
harb.cma.gov.il                          147.237.1.188
api.ims.gov.il                           147.237.1.222
mgk.eca.gov.il                           147.237.1.224
consularappointment.mfa.gov.il           147.237.1.226
bechirot.gov.il                          147.237.12.28
tiles.ims.gov.il                         147.237.1.25
websocket-poc.login.gov.il               147.237.12.84
www.hly.gov.il                           147.237.2.103
itur.mof.gov.il                          147.237.2.107
israelpatents.justice.gov.il             147.237.2.115
www.mr.gov.il                            147.237.2.151
t.login.gov.il                           147.237.2.159
www.ims.gov.il                           147.237.2.161
geo.mot.gov.il                           147.237.2.171
login.gov.il                             147.237.2.176
votes21.bechirot.gov.il                  147.237.2.204
media21.bechirot.gov.il                  147.237.2.205
media22.bechirot.gov.il                  147.237.2.236
votes22.bechirot.gov.il                  147.237.2.237
www.call.gov.il                          147.237.2.245
gemelnet.cma.gov.il                      147.237.2.30
ags.iplan.gov.il                         147.237.2.84
votes24.bechirot.gov.il                  147.237.3.108
media23.bechirot.gov.il                  147.237.3.11
votes23.bechirot.gov.il                  147.237.3.12
votes25.bechirot.gov.il                  147.237.3.206
new.embassies.gov.il                     147.237.3.224
bechirot21.bechirot.gov.il               147.237.3.58
bechirot22.bechirot.gov.il               147.237.3.58
bechirot23.bechirot.gov.il               147.237.3.58
bechirot24.bechirot.gov.il               147.237.3.58
embassies.gov.il                         147.237.3.58
p.geo.mot.gov.il                         147.237.3.77
sys.mybenefits.gov.il                    147.237.3.92
e.embassies.gov.il                       147.237.77.224
www.embassies.gov.il                     147.237.77.225
www.gpophoto.gov.il                      147.237.77.58
eportal-new13.govextra.gov.il            147.237.8.138
e-new13-scportal.govextra.gov.il         147.237.8.139
new13-scportal.govextra.gov.il           147.237.8.140
www.mashav.mfa.gov.il                    147.237.8.231
new13.govextra.gov.il                    147.237.9.73
e.old8.govextra.gov.il                   147.237.9.74
img.haarets.co.il                        151.101.194.132
p.e.innovationisrael.org.il              159.92.129.168
mta.e.innovationisrael.org.il            159.92.162.123
www.innovationisrael.org.il              172.67.172.161
innovationisrael.org.il                  172.67.73.53
htmag.co.il                              172.67.74.46
scholar.google.co.il                     173.194.195.99
development.campus.gov.il                18.155.202.45
govextra.gov.il                          18.160.200.108
credentials.campus.gov.il                18.173.132.15
test.innovationisrael.org.il             18.185.52.239
old.innovationisrael.org.il              18.196.217.100
prod.campus.gov.il                       18.238.49.54
www.campus.gov.il                        18.244.214.92
kindergarten.basma.muni.il               185.37.149.254
www.basma.muni.il                        185.37.149.254
crm.basma.muni.il                        185.70.250.140
lp.export.gov.il                         185.97.145.92
hadshon.edu.gov.il                       192.115.100.213
gateway.export.gov.il                    192.116.219.1
moses.export.gov.il                      192.116.219.10
yogev.export.gov.il                      192.116.219.11
milstein.export.gov.il                   192.116.219.12
ramati2.export.gov.il                    192.116.219.13
hayek.export.gov.il                      192.116.219.14
mail1.export.gov.il                      192.116.219.149
amalka.export.gov.il                     192.116.219.15
nogag.export.gov.il                      192.116.219.16
perry.export.gov.il                      192.116.219.17
kogel.export.gov.il                      192.116.219.18
library.export.gov.il                    192.116.219.20
kiriati.export.gov.il                    192.116.219.21
perel.export.gov.il                      192.116.219.22
yair.export.gov.il                       192.116.219.23
bednarski.export.gov.il                  192.116.219.24
pama.export.gov.il                       192.116.219.25
mmalka.export.gov.il                     192.116.219.26
rozen.export.gov.il                      192.116.219.27
levine.export.gov.il                     192.116.219.28
bloch.export.gov.il                      192.116.219.29
snyder.export.gov.il                     192.116.219.3
knafo.export.gov.il                      192.116.219.30
zissman.export.gov.il                    192.116.219.31
tzahor.export.gov.il                     192.116.219.32
barnai.export.gov.il                     192.116.219.33
fradkin.export.gov.il                    192.116.219.34
korazim.export.gov.il                    192.116.219.35
pama2.export.gov.il                      192.116.219.36
portnoy.export.gov.il                    192.116.219.37
transprt.export.gov.il                   192.116.219.38
economic.export.gov.il                   192.116.219.39
ramati.export.gov.il                     192.116.219.4
sternfld.export.gov.il                   192.116.219.40
library2.export.gov.il                   192.116.219.41
erez.export.gov.il                       192.116.219.42
safrai.export.gov.il                     192.116.219.43
kney-tal.export.gov.il                   192.116.219.44
amado.export.gov.il                      192.116.219.45
library3.export.gov.il                   192.116.219.49
machon.export.gov.il                     192.116.219.5
mail.export.gov.il                       192.116.219.5
israeli.export.gov.il                    192.116.219.50
toren.export.gov.il                      192.116.219.6
shaul.export.gov.il                      192.116.219.7
eytan.export.gov.il                      192.116.219.8
relayz.ims.gov.il                        192.117.139.115
mail.bus.gov.il                          194.90.113.3
ipa.mednet.co.il                         195.189.141.28
relayn.ims.gov.il                        199.203.58.15
primo.bgu.ac.il                          216.147.214.138
portal.campus.gov.il                     23.236.62.147
israel.kids.gov.il                       31.168.175.58
myapitest.innovationisrael.org.il        3.121.90.52
pre-prod.admin.innovationisrael.org.il   3.121.90.52
pre-prod.bodkim.innovationisrael.org.il  3.121.90.52
pre-prod.my.innovationisrael.org.il      3.121.90.52
dashboard.innovationisrael.org.il        3.124.153.18
staging.innovationisrael.org.il          3.124.153.18
stag.innovationisrael.org.il             3.124.153.18
test-wizard.innovationisrael.org.il      3.124.153.18
info.data.gov.il                         3.167.183.113
campus.gov.il                            3.169.149.110
notes.campus.gov.il                      3.169.183.41
courses.campus.gov.il                    3.169.183.68
preview.campus.gov.il                    3.169.183.68
studio.campus.gov.il                     3.169.183.96
prodtmp.campus.gov.il                    3.171.139.58
cms.palm-aspects.campus.gov.il           3.249.103.107
lms.palm-aspects.campus.gov.il           3.249.103.107
mybenefits.gov.il                        34.111.22.143
m.knesset.gov.il                         34.120.123.178
rama.edu.gov.il                          34.202.203.47
www.jet.gov.il                           34.204.223.211
apps.aspects.stage.campus.gov.il         34.244.113.90
aspects.stage.campus.gov.il              34.244.113.90
studio.aspects.stage.campus.gov.il       34.244.113.90
superset.aspects.stage.campus.gov.il     34.244.113.90
t.data.gov.il                            34.96.85.58
et.data.gov.il                           34.98.90.157
www.data.gov.il                          35.186.245.19
schools.ort.org.il                       35.190.7.149
e.data.gov.il                            35.227.231.125
bus.gov.il                               45.60.1.95
english.mod.gov.il                       45.60.31.88
mail.basma.muni.il                       5.100.249.241
corona.health.gov.il                     51.137.26.7
catalog.archives.gov.il                  51.17.17.198
courses.ginkgo.campus.gov.il             52.212.160.193
studio.ginkgo.campus.gov.il              52.212.160.193
preprod.campus.gov.il                    52.51.39.220
newsite.export.gov.il                    62.128.39.219
preprod.export.gov.il                    62.128.39.220
reprod.export.gov.il                     62.128.39.220
mail.rotenberglaw.co.il                  62.219.78.148
www.rotenberglaw.co.il                   62.90.118.228
mail.htmag.co.il                         62.90.141.50
links.responder.co.il                    63.35.13.206
courses.stage.campus.gov.il              65.8.161.113
secapp.taxes.gov.il                      84.110.103.8
mail.innovationisrael.org.il             91.143.232.238
admin.innovationisrael.org.il            99.83.201.3
bodkim.innovationisrael.org.il           99.83.201.3
myapi2.innovationisrael.org.il           99.83.201.3
myapi.innovationisrael.org.il            99.83.201.3
sub.innovationisrael.org.il              99.83.201.3

urls_ips_il_recon_ng.tar.gz

….continuará