Create a working directory for one target
#mkdir -p $IP/{nmap,web,exploit,loot}
cd $IP
Run AutoRecon
#autorecon $IP --only-scans-dir
Run a fast TCP sweep
#nmap --min-rate 4500 --max-rtt-timeout 1500ms -p- -Pn $IP -oG nmap/all_tcp.gnmap
Extract open TCP ports#
TCP_PORTS=$(grep -oP '\d+/open' nmap/all_tcp.gnmap | cut -d/ -f1 | paste -sd, -)
echo "$TCP_PORTS"
Run service detection on open TCP ports
#nmap -sC -sV -T4 -Pn -p "$TCP_PORTS" $IP -oA nmap/full_tcp
Scan top 100 UDP ports
#nmap -sU --top-ports 100 -T4 -Pn $IP -oA nmap/top_udp
What to open next
#