> For the complete documentation index, see [llms.txt](https://pentesting.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentesting.mrw0l05zyn.cl/escaneo-y-enumeracion/herramientas-automatizadas.md).

# Herramientas automatizadas

## nmapAutomator

* <https://github.com/21y4d/nmapAutomator>

```shell
nmapAutomator.sh -H <target> -t <type> -o <output-directory>
```

* -H = host.
  * \<target> = objetivo.
* -t = tipo de escaneo.
  * \<type> = `Quick`, `Basic`, `UDP`, `Full`, `Vulns`, `Recon` y `All`.
* -o = output.
  * \<output-directory> = directorio de salida.

## AutoRecon

* <https://github.com/Tib3rius/AutoRecon>

```shell
# General
autorecon -v <target> -o <output-directory>
# Docker
docker run -it -v /root/results:/results --rm --name autorecon-container tib3rius/autorecon <target>
```

* \<target> = objetivo.
* -o = output.&#x20;
  * \<output-directory> = directorio de salida.

## Nuclei

* <https://nuclei.projectdiscovery.io/>

```shell
# Configuración de directorio de templates
nuclei -ud <directory>
# Actualización de templates
nuclei -ut
# Listar todos los templates
nuclei -tl
# Filtrar templates por protocolo
nuclei -tl -pt <dns, file, http, headless, tcp, workflow, ssl, websocket, whois>
```

```shell
# Scanner
nuclei -u <target> -t <template-directory>
nuclei -l targets.txt -t <template-directory>
nuclei -u <target> -t <template-directory> -rl 10
# HTTP security headers
nuclei -u <target> -t misconfiguration/http-missing-security-headers.yaml -o nuclei-http-security-headers.txt
```

* -u = URL/host.
  * \<target> = objetivo.
* -t = template.
  * \<template-directory> = template o ruta de directorio con template.
* -rl = número máximo de request por segundo.
* -rlm = número máximo de request por minuto.