ENScanGo main domain name batch extraction script

For ENScanGo, please refer to: Red team web management information collection_Shanshanerchuan' blog-CSDN Blog

This is a tool written by Master Keac of the Wolf Group Security Team to solve the problem of difficult enterprise information collection. It can collect the ICP filing, APP, applet, WeChat public of the target and its holding company with one clickNumber and other information are then aggregated and exported.

This tool cannot query the company's main site in batches, so here is a script to implement it.The company name is written in company.txt, and the main domain name can be extracted in batches after the script is run

enscan batch get main domain.py

import os, fnmatch, win32apifrom openpyxl import Workbook, load_workbookfrom colorama import init,Foreinit(autoreset=True)path = "D:\\xxxx\\Red Team" #ENScanGo is placed in this pathenscan_path = path + "\\ENScanGo"enscan_outs_path = enscan_path + "\\outs"domain_set = set() #Install the main domain of all companiesnodomain_company = set()def enscan(company):enscan_command = "ENScanPublic_amd64_windows.exe -n %s -type all"%(company)print(Fore.RED + "\n[info]Start collecting '%s' main domain..."%(company))#Determine whether the company folder exists the original resultos.chdir(enscan_outs_path)for name in os.listdir():if fnmatch.fnmatch(name,"*%s*--*"%(company)):os.remove(name)#Excuting an orderos.chdir(enscan_path)os.system(enscan_command)# extract the main domainprint(Fore.RED + "\nExtract the main domain as follows: ")os.chdir(enscan_outs_path)domain = set() #Install the main domain of each companyfor name in os.listdir():if fnmatch.fnmatch(name,"*%s*--*"%(company)):wb = load_workbook(name)try:sheet = wb["ICP filing"]except:sheet = wb["icp"]for row in sheet.iter_rows(): # Traverse all tables and display them in the form of tuplesfor cell in row: # Traverse all the tables and display them one by oneif "C" in cell.coordinate : #The position of each table cell.coordinate such as A1 A2if cell.coordinate != 'C1': #Do not extract the first rowprint(cell.value)domain.add(cell.value)domain_set.add(cell.value)if len(domain) == 0:print("The company did not find the main domain!")nodomain_company.add(company)if __name__ == '__main__':for c in open("company.txt",'r',encoding="utf-8"):enscan(c.replace("\n",""))# output main domainos.chdir(path)if os.path.exists("ens_domain.txt"):os.remove("ens_domain.txt")print(Fore.RED + "\nAll main fields are as follows:")for i in domain_set:print(i)with open("ens_domain.txt","a",encoding="utf-8") as f:f.write(i + "\n")if len(nodomain_company) != 0:print(Fore.RED + "\nThe companies that have not obtained the main domain are as follows:")for h in nodomain_company:print(h)win32api.ShellExecute(0, 'open', 'ens_domain.txt', '', '', 1)