OWASP Maryam is an Open-source intelligence(OSINT) and Web-based Footprinting modular/tool framework based on the Recon-ng and written in Python. If you have skill in Metasploit or Recon-ng, you can easily use it without prerequisites.
Also Read – Lazydocker : The Lazier Way To Manage Everything Docker
What can be done?
If you want
- Extracts Emails, Docs, Subdomains, Social networks from search engines
- Extracts Links, CSS and JS files, CDN links, Emails, Keywords from Web Source
- Find and Brute force DNS, TLD and important directs
- Crawl Web Pages and search your RegExp
- Identify WebApps, WAF, Interesting and important files
- And get report with several format
Install
git clone https://github.com/saeeddhqan/Maryam.git
cd Maryam
pip install -r requirements
chmod +x maryam
./maryam
Quick Guide
For help options
- write
help
or?
- or write
help <command-name>
for help your command
For show modules
- write
show modules
For use modules
- write
use <module-name>
orload <module-name>
For show set options
- write
show options
For set an option
- write
set <option-name> <value>
- for example
set VERBOSITY 2
For run selected module
- write
run
For add a variable
- write
var <$name> <value>
- for example
var $hunter_key XXXXXXXXXXXXXXXX
- for use it write
set HUNTER_KEY $hunter_key
- for show all of variables write
var list
command - for delete a variable write
var delete <var-name>
For get report from modules output
- set ‘output’ option with True:
set output True
- Or use ‘–output switch’:
wapps -d domain.com --output
- And next, use
report
command:report <format> <file-name-for-output> <module-name>
- For example
report <format> pdf_docs osint/docs_search localhost
For show history commands
- write
history all
For modules search
- write
search <string>
For record commands
- write
record start <file-name>
- for stop it
record stop
For store all outputs
- write
spool start <file-name>
- for stop it
spool stop
For run commands from file
- write
resource <commands-file-name>
For run shell command
- write
shell <command>
or! <command>
or<command>
For reload all modules
- write
reload
For config the connections
- see the options:
show options
- and set the options:
set TIMEOUT 2.5
For use random user-agent
- write
set RAND_AGENT true