Sponsored
Bugbounty Tools

Gasmask – Information Gathering Tool

Hey Folks, in this tutorial we are going to talk about an all in one tool called “gasmask“. Originally the tool is designed to get different types of information against the target system or web application. It uses various other third-party tools to collect sensitive information against targets such as the dnsdumpster tool, whys, etc.

Let’s take a look 🙂 !!

Installation

We can easily configure this tool in our system by just following these steps. First of all we execute the git clone command to download this remote repository from the destination. After downloading is done then we go to the directory of this tool and install some dependencies by using the pip3 tool.

git clone https://github.com/twelvesec/gasmask.git
cd gasmask/
sudo pip3 install -r requirements.txt

Done 🙂 !! After doing all the above things we can boot our tool using the below command.

python3 gasmask.py

Basic Scan

This tool has basic features that anyone can easily use. If we want to perform a basic scan against the target then all we need to do is to set our target details along with the commands given below.

Usage 😛 !! python3 gasmask.py -d < domain name > -i basic

python3 gasmask.py -d testphp.vulnweb.com -i basic

Emails

Boom 🙂 !! As you can see we have received email addresses on the target web application without much effort.

Whois Lookup

Similarly, we can also see when a web application has been registered and when will the domain expire.

python3 gasmask.py -d testphp.vulnweb.com -i whois

DNS Details

In some cases we need to find the DNS details of the target website for which we use various third-party tools or online service but through this tool we can easily find it.

python3 gasmask.py -d testphp.vulnweb.com -i dns

All in one option

Similarly, you can get all the above information at the same time by adding all the arguments by commas.

python3 gasmask.py -d testphp.vulnweb.com -i whois,dns,revdns

Done 🙂 !! Thus you can take help of this tool and get more information about the target easily.

About the Author
Shubham Goyal Certified Ethical Hacker, information security analyst, penetration tester and researcher. Can be Contact on Linkedin.
Sponsored

Recent Posts

Termux Cheat Sheet for Hackers

Hey Folks :) !! In this article, we present the "Termux Cheat Sheet for Hackers"…

1 month ago

Cracking the X-Factor in Cybersecurity: How Humans are Protecting the Systems?

Amid the rapid advancement of technology, the significance of human involvement in cybersecurity frequently goes…

8 months ago

Cariddi – Hidden Endpoint Finder for Bug Hunting

Hey Folks, we are back today after such a long break, but don't worry we…

2 years ago

API Security Testing 101: Know Everything About API Security Testing!

The security of your API should be one of the top priorities of companies. Without…

2 years ago

7 Best Tools for Web Penetration Testing: Comprehensive Details

Hey Folks, In today's business world, it is essential to have an online presence. However,…

2 years ago

Cyber Security Audits: Everything You Need to Know About It

Hey Folks, Is your business prepared in case of a cyber attack? Many companies don't…

2 years ago
Sponsored

This website uses cookies.