amass 4subfinder 48subdomains 49resolved 48ips 4open_ports 156web_services 146
[2026-10-17 21:18:45] == Amass (énumération passive) [2026-10-17 21:18:45] $ amass enum -d bastiencordier.pro -timeout 5 -silent -nocolor [2026-10-17 21:20:35] terminé en 110s [2026-10-17 21:20:35] $ amass subs -names -d bastiencordier.pro -nocolor [2026-10-17 21:20:35] terminé en 0s [2026-10-17 21:20:35] 4 noms via Amass [2026-10-17 21:20:35] == Subfinder (énumération passive) [2026-10-17 21:20:35] $ subfinder -d bastiencordier.pro -all -silent -duc [2026-10-17 21:21:28] terminé en 53s [2026-10-17 21:21:28] 48 noms via Subfinder [2026-10-17 21:21:28] == dnsx (résolution DNS) [2026-10-17 21:21:28] $ dnsx -l /tmp/scan2-qsqly5c2/subs.txt -a -aaaa -cname -json -silent -duc [2026-10-17 21:21:28] terminé en 0s [2026-10-17 21:21:28] 48 noms résolus, 4 IP [2026-10-17 21:21:28] == naabu (top 100 ports) [2026-10-17 21:21:28] $ naabu -list /tmp/scan2-qsqly5c2/hosts.txt -top-ports 100 -scan-type c -exclude-cdn -verify -json -silent -duc [2026-10-17 21:21:34] terminé en 6s [2026-10-17 21:21:34] 156 ports ouverts [2026-10-17 21:21:34] == httpx (sondage web) [2026-10-17 21:21:34] $ httpx -l /tmp/scan2-qsqly5c2/httpx_in.txt -json -silent -duc -nc -title -tech-detect -status-code -web-server -ip -cdn -timeout 8 [2026-10-17 21:21:36] terminé en 2s [2026-10-17 21:21:37] 146 services web [2026-10-17 21:21:37] == nuclei (sévérités : low,medium,high,critical) [2026-10-17 21:21:37] $ nuclei -l /tmp/scan2-qsqly5c2/urls.txt -jsonl -silent -nc -duc -severity low,medium,high,critical -rate-limit 150 -timeout 10 -exclude-tags dos,fuzz,intrusive -stats -sj -si 30 [2026-10-17 21:22:13] progression 0% · 5471/2106258 requêtes · 0 résultats · 180 req/s [2026-10-17 21:23:43] progression 1% · 21816/2106258 requêtes · 0 résultats · 181 req/s