script_norcorea.sh
#! /bin/bash # Crea el archivo commands echo "workspaces load norcorea" > commands_kp echo "modules load recon/domains-hosts/hackertarget" >> commands_kp # Iterar sobre cada dominio en urls_kp.txt while read domain; do echo "options set SOURCE $domain" >> commands_kp echo "run" >> commands_kp done < urls_kp.txt
./script_norcorea.sh recon-ng -r /home/usuario/commands_kp (ruta absoluta, sino no funciona)
[recon-ng][norcorea] > show hosts [recon-ng][norcorea] > spool start /home/usuario/volcado_kp.txt (a partir de ahora todos los resultados de los comandos se guardarán en el fichero volcado_kp.txt) [recon-ng][norcorea] > [recon-ng][norcorea] > show hosts [recon-ng][norcorea] > spool stop [*]Spooling stopped. Output saved to '/home/usuario/volcado_kp.txt'. [recon-ng][norcorea] >
cat volcado_kp.txt | grep -Eo '[a-z].*+\.kp|([0-9]{1,3}\.){3}[0-9]{1,3}' | sed '/.*/ {N; s/\n/ /}' | sort -k2 | column -t > url_ip_kp.txt cat url_ip_kp.txt korfilm.com.kp 17.45.177.11 www.rodong.rep.kp 175.45.176.68 www.airkoryo.com.kp 175.45.176.69 www.vok.rep.kp 175.45.176.75 www.ma.gov.kp 175.45.176.76 ns1.friend.com.kp 175.45.176.8 ns1.kiyctc.com.kp 175.45.176.8 ns1.korean-books.com.kp 175.45.176.8 ns1.koredufund.org.kp 175.45.176.8 ns1.korfilm.com.kp 175.45.176.8 ns1.kut.edu.kp 175.45.176.8 ns1.ma.gov.kp 175.45.176.8 ns1.mfa.gov.kp 175.45.176.8 ns1.mirae.aca.kp 175.45.176.8 ns1.naenara.com.kp 175.45.176.8 ns1.rodong.rep.kp 175.45.176.8 ns1.ryongnamsan.edu.kp 175.45.176.8 ns1.sdprk.org.kp 175.45.176.8 ns1.tourismdprk.gov.kp 175.45.176.8 ns1.vok.rep.kp 175.45.176.8 ns1.youth.rep.kp 175.45.176.8 ns2.airkoryo.com.kp 175.45.176.8 kftrade.com.kp 175.45.176.80 www.friend.com.kp 175.45.176.80 www.koredufund.org.kp 175.45.176.80 www.kut.edu.kp 175.45.176.80 www.ryongnamsan.edu.kp 175.45.176.80 korart.sca.kp 175.45.176.81 www.gpsh.edu.kp 175.45.176.81 www.kass.org.kp 175.45.176.81 www.korfilm.com.kp 175.45.176.81 www.mfa.gov.kp 175.45.176.81 yongsaeng.org.kp 175.45.176.81 ns1.airkoryo.com.kp 175.45.176.9 ns1.kass.org.kp 175.45.176.9 ns2.friend.com.kp 175.45.176.9 ns2.kiyctc.com.kp 175.45.176.9 ns2.korean-books.com.kp 175.45.176.9 ns2.koredufund.org.kp 175.45.176.9 ns2.korfilm.com.kp 175.45.176.9 ns2.kut.edu.kp 175.45.176.9 ns2.ma.gov.kp 175.45.176.9 ns2.mfa.gov.kp 175.45.176.9 ns2.mirae.aca.kp 175.45.176.9 ns2.naenara.com.kp 175.45.176.9 ns2.rodong.rep.kp 175.45.176.9 ns2.ryongnamsan.edu.kp 175.45.176.9 ns2.sdprk.org.kp 175.45.176.9 ns2.tourismdprk.gov.kp 175.45.176.9 ns2.vok.rep.kp 175.45.176.9 ns2.youth.rep.kp 175.45.176.9 koreanarchitecture.gov.kp 175.45.176.91 korstamp.com.kp 175.45.176.91 moph.gov.kp 175.45.176.91 www.korean-books.com.kp 175.45.176.91 www.minzu.rep.kp 175.45.176.91 www.mirae.aca.kp 175.45.176.91 www.naenara.com.kp 175.45.176.91 www.sdprk.org.kp 175.45.176.91 www.tourismdprk.gov.kp 175.45.176.91 www.youth.rep.kp 175.45.176.91 friend.com.kp 175.45.177.10 koredufund.org.kp 175.45.177.10 www.kftrade.com.kp 175.45.177.10 www.kiyctc.com.kp 175.45.177.11 mail.airkoryo.com.kp 175.45.177.33 mail.ryongnamsan.edu.kp 175.45.178.55 smtp.ryongnamsan.edu.kp 175.45.178.56 smtp1.ryongnamsan.edu.kp 175.45.178.57