Scilla – Information Gathering Tool (DNS/Subdomain/Port Enumeration)

Information Gathering Tool – Dns/Subdomain/Port Enumeration

Installation

First of all, clone the repo locally

git clone https://github.com/edoardottt/scilla.git

Scilla has external dependencies, so they need to be pulled in:

go get

Working on installation… See the open issue.

For now you can run it inside the scilla folder with go run scilla.go ...

Too late.. : see this

Then use the build scripts:

• make windows builds 32 and 64 bit binaries for Windows, and writes them to the build subfolder.

• make linux builds 32 and 64 bit binaries for Linux, and writes them to the build subfolder.

• make unlinux Removes binaries.

• make fmt run the golang formatter.

• make update Update.

• make remod Remod.

• make test runs the tests.

• make clean clears out the build subfolder.

Get Started

scilla help prints the help in the command line.

usage: scilla [subcommand] { options }

    Available subcommands:
        - dns { -target <target (URL)> REQUIRED}
        - subdomain { -target <target (URL)> REQUIRED}
        - port { [-p <start-end>] -target <target (URL/IP)> REQUIRED}
        - report { [-p <start-end>] -target <target (URL/IP)> REQUIRED}
        - help

Examples

• DNS enumeration scilla dns -target target.domain

• Subdomain enumeration scilla subdomain -target target.domain

• Port enumeration:

  • Default (all ports, so 1-65635) scilla port -target target.domain

  • Specifying ports range scilla port -p 20-90 -target target.domain

  • Specifying starting port (until the last one) scilla port -p 20- -target target.domain

  • Specifying ending port (from the first one) scilla port -p -90 -target target.domain

  • Specifying single port scilla port -p 80 -target target.domain

• Full report:

  • Default (all ports, so 1-65635) scilla report -target target.domain

  • Specifying ports range scilla report -p 20-90 -target target.domain

  • Specifying starting port (until the last one) scilla report -p 20- -target target.domain

  • Specifying ending port (from the first one) scilla report -p -90 -target target.domain

  • Specifying single port scilla report -p 80 -target target.domain