amass 4subfinder 48subdomains 49resolved 48ips 4open_ports 168web_services 158findings 2
[2026-10-17 21:25:08] == Amass (énumération passive) [2026-10-17 21:25:08] $ amass enum -d bastiencordier.pro -timeout 5 -silent -nocolor [2026-10-17 21:26:44] terminé en 96s [2026-10-17 21:26:44] $ amass subs -names -d bastiencordier.pro -nocolor [2026-10-17 21:26:44] terminé en 0s [2026-10-17 21:26:44] 4 noms via Amass [2026-10-17 21:26:44] == Subfinder (énumération passive) [2026-10-17 21:26:44] $ subfinder -d bastiencordier.pro -all -silent -duc [2026-10-17 21:27:14] terminé en 30s [2026-10-17 21:27:14] 48 noms via Subfinder [2026-10-17 21:27:14] == dnsx (résolution DNS) [2026-10-17 21:27:14] $ dnsx -l /tmp/scan4-ts39x9db/subs.txt -a -aaaa -cname -json -silent -duc [2026-10-17 21:27:14] terminé en 0s [2026-10-17 21:27:15] 48 noms résolus, 4 IP [2026-10-17 21:27:15] == naabu (top 100 ports) [2026-10-17 21:27:15] $ naabu -list /tmp/scan4-ts39x9db/hosts.txt -top-ports 100 -scan-type c -exclude-cdn -verify -json -silent -duc [2026-10-17 21:27:20] terminé en 6s [2026-10-17 21:27:21] 168 ports ouverts [2026-10-17 21:27:21] == httpx (sondage web) [2026-10-17 21:27:21] $ httpx -l /tmp/scan4-ts39x9db/httpx_in.txt -json -silent -duc -nc -title -tech-detect -status-code -web-server -ip -cdn -timeout 8 [2026-10-17 21:27:23] terminé en 2s [2026-10-17 21:27:23] 158 services web [2026-10-17 21:27:23] == nuclei (auto, sévérités : low,medium,high,critical) [2026-10-17 21:27:23] $ nuclei -l /tmp/scan4-ts39x9db/urls.txt -jsonl -silent -nc -duc -severity low,medium,high,critical -rate-limit 150 -timeout 10 -exclude-tags dos,fuzz,intrusive -stats -sj -si 30 -as [2026-10-17 21:27:59] progression 9223372036854775808% · 3964/0 requêtes · 0 résultats · 131 req/s [2026-10-17 21:28:29] terminé en 65s [2026-10-17 21:28:29] 2 constats