Yuyu Scanner

Yuyu Scanner is a Web Reconnaissance & Web Analysis Scanner to find assets and information about targets.

installation

   ! run as root
   ~$ chmod +x install.sh
   ~$ ./install.sh

Preview

GUI

This Gui is made using Electron JS and Bootstrap

CLI

This CLI was created using the python language program

REPORTING

Features

• Available for Gui Version

• Subdomain Discovery with Passive Method from Public Api

            http://web.archive.org/
            https://threatcrowd.org/
            https://urlscan.io/
            https://rapiddns.io/
            https://otx.alienvault.com/
            https://dnsdumpster.com/
            https://crt.sh/
            https://api.threatminer.org/
            https://api.certspotter.com/
            https://api.hackertarget.com/
            https://riddler.io/
            http://index.commoncrawl.org/
  

• Top 10 port scanning with NMAP

• Url Discovery from waybackurl

• IP Discovery

• Title Discovery of target

• Common sensitive files Discovery

• Status code Discovery from subdomain result

• Reverse IP with Passive Method from Public Api

• Checking Collected Subdomain and IP Address

• Email Address Discovery with Passive Method from Public Api

• WHOIS Lookup

• Save all Discovery result

• Generate HTML Report

• Generate JSON Report

• Multiprocessing

Usage

• Basic Arguments:

          ~$ python3 yuyu.py -u domain.com [arg]
  

            -h, --help            show this help message and exit
            -u URL, --url URL     Target URL
            -g, --gui             Run Yuyu in Gui Mode
            -sp, --scanport       Port Discovery from Discovery IP
            -ri, --revip          Reverse IP from target URL
            -wl, --whois          Whois Lookup from target URL
            -cu, --collecturl     Collect URL from target URL & Subdomain Result
            -ed, --emaildiscover  Email Discovery jfrom Subdomain Result
            -fs, --filesensitive  Find Sensitive Files from Subdomain Result

Run Gui

  bash gui.sh run

Stop Gui

  bash gui.sh stop

Publication

• https://www.researchgate.net/publication/352295423_PENGEMBANGAN_APLIKASI_INFORMATION_GATHERING_MENGGUNAKAN_METODE_HYBRID_SCAN_BERBASIS_GRAPHICAL_USER_INTERFACE

Contact me

• akazh - Twitter

References

• https://github.com/screetsec/Sudomy
• https://github.com/aboul3la/Sublist3r

Credits & Thanks

• Deddy Hariyadi
• Redho Maland