Goohost - Simple shell script extracts hosts/subdomains, ip or emails for a specific domain with Google search

Goohost is a simple shell script written by Watakushi that extracts hosts/subdomains, ip or emails for a specific domain with Google search.

Installation

First create a directory for the installation

$ mkdir -p /pentest/enumeration/google/goohost/

Then download the tool and make it executable:

$ cd /pentest/enumeration/google/goohost/
$ wget http://dl.dropbox.com/u/10761700/goohost.sh
$ chmod +x goohost.sh

Usage

Syntax

$ ./goohost.sh -t domain.tld [-m <host|ip|mail> -p <1-20> -v]

Options

-t <domain>

target domain. E.g. backtrack.linux.org

-m <method>

method: <ip|host|mail>

Default value is set to host

• host: raw google hosts and subdomains search
• ip: raw google hosts and subdomains search and performs a reverse DNS resolution
• mail: raw google email search

-p <num>

Max number of pages (1-20) to download from Google.

Default 5

-v

verbosity.

Default is set to off

Example

Method: IP (-m ip)

$ ./goohost.sh -m ip -t aldeid.com
Results saved in file report-27526-aldeid.com.txt 
$ cat report-27526-aldeid.com.txt
www.aldeid.com 80.14.163.161

Method: Host (-m host)

$ ./goohost.sh -m host -t aldeid.com
Results saved in file report-29958-aldeid.com.txt 
1 results found! 
$ cat report-29958-aldeid.com.txt
www.aldeid.com

Method: Mail (-m mail)

$ ./goohost.sh -m mail -t aldeid.com
Results saved in file report-14152-aldeid.com.txt 
0 results found!

Source -

http://www.aldeid.com/wiki/Goohost