amass 4subfinder 48subdomains 49resolved 48ips 4open_ports 172web_services 162findings 2
[2026-10-18 10:04:32] Périmètre « bastiencordier.pro » : bastiencordier.pro [2026-10-18 10:04:32] == Amass (énumération passive) [2026-10-18 10:04:32] $ amass enum -d bastiencordier.pro -timeout 5 -silent -nocolor [2026-10-18 10:06:36] terminé en 124s [2026-10-18 10:06:36] $ amass subs -names -d bastiencordier.pro -nocolor [2026-10-18 10:06:36] terminé en 0s [2026-10-18 10:06:36] 4 noms via Amass [2026-10-18 10:06:36] == Subfinder (énumération passive) [2026-10-18 10:06:36] $ subfinder -d bastiencordier.pro -all -silent -duc [2026-10-18 10:07:12] terminé en 35s [2026-10-18 10:07:12] 48 noms via Subfinder [2026-10-18 10:07:12] == dnsx (résolution DNS) [2026-10-18 10:07:12] $ dnsx -l /tmp/scan5-nh7sh0l1/subs.txt -a -aaaa -cname -json -silent -duc [2026-10-18 10:07:12] terminé en 0s [2026-10-18 10:07:13] 48 noms résolus, 4 IP [2026-10-18 10:07:13] == naabu (top 100 ports) [2026-10-18 10:07:13] $ naabu -list /tmp/scan5-nh7sh0l1/hosts.txt -top-ports 100 -scan-type c -exclude-cdn -verify -json -silent -duc [2026-10-18 10:07:24] terminé en 11s [2026-10-18 10:07:24] 172 ports ouverts [2026-10-18 10:07:24] == httpx (sondage web) [2026-10-18 10:07:24] $ httpx -l /tmp/scan5-nh7sh0l1/httpx_in.txt -json -silent -duc -nc -title -tech-detect -status-code -web-server -ip -cdn -timeout 8 [2026-10-18 10:07:27] terminé en 2s [2026-10-18 10:07:27] 162 services web [2026-10-18 10:07:27] == nuclei (auto, sévérités : low,medium,high,critical) [2026-10-18 10:07:27] $ nuclei -l /tmp/scan5-nh7sh0l1/urls.txt -jsonl -silent -nc -duc -severity low,medium,high,critical -rate-limit 150 -timeout 10 -exclude-tags dos,fuzz,intrusive -stats -sj -si 30 -as [2026-10-18 10:08:02] progression 3619 requêtes · 0 résultats · 119 req/s [2026-10-18 10:08:36] terminé en 69s [2026-10-18 10:08:36] 2 constats