安装

┌──(root💀kali)-[~]
└─# git clone https://github.com/s0md3v/Photon.git                     
正克隆到 'Photon'...
remote: Enumerating objects: 30, done.
remote: Counting objects: 100% (30/30), done.
remote: Compressing objects: 100% (27/27), done.
remote: Total 1076 (delta 4), reused 19 (delta 0), pack-reused 1046
接收对象中: 100% (1076/1076), 355.40 KiB | 618.00 KiB/s, 完成.
处理 delta 中: 100% (580/580), 完成.

python3 photon.py -h

──(root💀kali)-[~/Photon]
└─# python3 photon.py -h
      ____  __          __
     / __ \/ /_  ____  / /_____  ____
    / /_/ / __ \/ __ \/ __/ __ \/ __ \
   / ____/ / / / /_/ / /_/ /_/ / / / /
  /_/   /_/ /_/\____/\__/\____/_/ /_/ v1.3.2

usage: photon.py [-h] [-u ROOT] [-c COOK] [-r REGEX] [-e {csv,json}] [-o OUTPUT] [-l LEVEL] [-t THREADS] [-d DELAY] [-v] [-s SEEDS [SEEDS ...]] [--stdout STD]
                 [--user-agent USER_AGENT] [--exclude EXCLUDE] [--timeout TIMEOUT] [-p PROXIES] [--clone] [--headers] [--dns] [--keys] [--update] [--only-urls]
                 [--wayback]

optional arguments:
  -h, --help            show this help message and exit
  -u ROOT, --url ROOT   root url
  -c COOK, --cookie COOK
                        cookie
  -r REGEX, --regex REGEX
                        regex pattern
  -e {csv,json}, --export {csv,json}
                        export format
  -o OUTPUT, --output OUTPUT
                        output directory
  -l LEVEL, --level LEVEL
                        levels to crawl
  -t THREADS, --threads THREADS
                        number of threads
  -d DELAY, --delay DELAY
                        delay between requests
  -v, --verbose         verbose output
  -s SEEDS [SEEDS ...], --seeds SEEDS [SEEDS ...]
                        additional seed URLs
  --stdout STD          send variables to stdout
  --user-agent USER_AGENT
                        custom user agent(s)
  --exclude EXCLUDE     exclude URLs matching this regex
  --timeout TIMEOUT     http request timeout
  -p PROXIES, --proxy PROXIES
                        Proxy server IP:PORT or DOMAIN:PORT
  --clone               clone the website locally
  --headers             add headers
  --dns                 enumerate subdomains and DNS data
  --keys                find secret keys
  --update              update photon
  --only-urls           only extract URLs
  --wayback             fetch URLs from archive.org as seeds

s

┌──(root💀kali)-[~/Photon]
└─# python3 photon.py -u https://hk.trip.com/ --dns                                                                                                                1 ⨯
      ____  __          __
     / __ \/ /_  ____  / /_____  ____                                                                                                                                  
    / /_/ / __ \/ __ \/ __/ __ \/ __ \                                                                                                                                 
   / ____/ / / / /_/ / /_/ /_/ / / / /                                                                                                                                 
  /_/   /_/ /_/\____/\__/\____/_/ /_/ v1.3.2                                                                                                                           

[+] URLs retrieved from robots.txt: 35
[~] Level 1: 36 URLs
[!] Progress: 36/36
[~] Level 2: 16 URLs
[!] Progress: 16/16
[~] Crawling 1 JavaScript files
[!] Progress: 1/1
--------------------------------------------------
[+] Intel: 17
[+] Robots: 35
[+] Internal: 64
[+] Scripts: 1
[+] External: 14
[+] Fuzzable: 4
--------------------------------------------------
[!] Total requests made: 54
[!] Total time taken: 0 minutes 50 seconds
[!] Requests per second: 1
[~] Enumerating subdomains
[!] 0 subdomains found
[~] Generating DNS map
[+] Results saved in hk.trip.com directory

┌──(root💀kali)-[~/Photon]
└─# cd hk.trip.com
                                                                                                                                                                       
┌──(root💀kali)-[~/Photon/hk.trip.com]
└─# ls
external.txt  fuzzable.txt  intel.txt  internal.txt  robots.txt  scripts.txt  trip.com.png