Register on → http://beta.lemonbooster.com/auth/register
Follow the Installation steps on → http://beta.lemonbooster.com/docs
This tool runs and stores results locally, so no one (not even me) will have access to your data from outside.
It is a tool that automates and monitors a large part of the Recon phase.
It runs in a web environment, and facilitates the execution of tools.
-
Go to DigitalOcean, Linode or run a VPS with your favourite provider.
- A VPS of 2gb ram and 50gb storage is recommended.
-
On your Shell →
ssh root@[YourVpsIP]
-
Once inside VPS →
mkdir ~/tools
-
Go to the tools folder →
cd ~/tools
-
Clone the repo →
git clone https://github.com/bonino97/LemonBooster-v2.git
-
Go to Config LemonBooster folder →
cd ~/tools/LemonBooster-v2/Config-LemonBooster-v2
-
Give privileges to the SH Installer. →
chmod +x Install-LemonBooster-Ubuntu20.04.sh
- If you have a VPS with Ubuntu 18.04. →
chmod +x Install-LemonBooster-Ubuntu18.04.sh
- If you have a VPS with Ubuntu 18.04. →
-
Run the Installer →
./Install-LemonBooster-Ubuntu20.04.sh
- The script gonna install the database for save results, all the tools used by LemonBooster and all the requireds dependencies.
- The installer leave your VPS ready to configure on the WEB.
-
Once the Installer finish. Go to Settings. and load the VPS Ip .
-
If everything installed correctly, you should see [Status: ✔ ]. In the left Sidebar options.
-
IMPORTANT! → If you want to see the proccess running:
- Go to Config Folder →
cd ~/tools/LemonBooster-v2/Config-LemonBooster-v2
- Give privileges to the ViewExecution SH. →
chmod +x ViewExecution.sh
- Run SH. →
./ViewExecution.sh
- By this way, you can execute the tools, and see all the proccess running (tools included).
- Go to Config Folder →
- OneClick complete Scanning. [Run Subdomain Enumeration, Alives, Screenshots, Spidering]
- Subdomain Enumerations. [Findomain, Subfinder, Assetfinder, Amass, Github Search, Permutations]
- Alives. [Httprobe]
- Subdomain Response Codes. [Hakcheckurl]
- Screenshots. [Aquatone]
- Js Scanning. [Linkfinder]
- Waybackurls. [Waybackurls]
- Spidering. [GoSpider, Hakrawler].
- Dir Bruteforcing. [Dirsearch].
- Get multiples loaded lists to use.
- Save results on MongoDB.
- Compare Old Results with New Results in each Scanning.
- New Results in Monitoring Option.
- https://github.com/Findomain/Findomain
- https://github.com/tomnomnom/assetfinder
- https://github.com/projectdiscovery/subfinder
- https://github.com/OWASP/Amass
- https://github.com/gwen001/github-search
- https://github.com/OJ/gobuster
- https://github.com/tomnomnom/httprobe
- https://github.com/michenriksen/aquatone
- https://github.com/GerbenJavado/LinkFinder
- https://github.com/hakluke/hakcheckurl
- https://github.com/tomnomnom/waybackurls
- https://github.com/jaeles-project/gospider
- https://github.com/hakluke/hakrawler
- https://github.com/maurosoria/dirsearch
Many thanks to the tools developers <3
Copy and Paste the List inside the Lists folder → cp Example.txt ~/tools/LemonBooster-v2/API-LemonBooster-v2/Common/Lists
- Telegram Bot
- Port Scanning with Naabu
- Ffuf
- Gau
- JSF Scan
- Kxss
- Paramspider / Arjun
If you found a bug, please send to support@lemonbooster.com or make a Github Issue. :)
Follow us on Twitter
If you are interested in support the tool because you liked the project:
BTC Wallet: 156CNj43EDXKWj2s2sKnNzWga3jX4kHQYf
ETH Wallet: 0x2318eB71Ff070955aC7064750503855392aE83A9