Nuclei Chain - Domain Names

Full recon chain from a domain list to a deduplicated ip,host CSV of findings. Requires dnsx, httpx, nuclei (with templates), and jq.

1. Reads from a domain list in lists/
2. Resolves DNS, saves to JSON output
3. Plucks out hosts from JSON output with jq
4. Runs httpx, saves to JSON output
5. Pulls out URLs with jq
6. Runs nuclei with templates in a nuclei/ folder, saves to JSON output
7. Pulls out host,ip from nuclei output
8. Organizes it into ip,host CSV

Uses the now alias for timestamped output filenames.

cat lists/LIST-NAME.txt | dnsx -rl 25 -retry 5 -j -o dnsx-LIST-NAME.json -or | jq .host -r | httpx -nf -j -o httpx-dnsx-LIST-NAME.json | jq .url -r | nuclei -nh -t nuclei/ -j -o nucleiResult-LIST-NAME-$(now).json | jq "[.host,.ip]" | tr -d '\n' | tr ']' '\n' | tr -dc 'a-z0-9.:/,\n\-' | cut -d '/' -f 3- | tr ',' '\t' | awk '{print $2","$1}' | sort -n > affectedIPandDomain_$(now).csv