██████╗ ███████╗ ██████╗ ██████╗  ██████╗ ███╗   ██╗
██╔══██╗██╔════╝██╔════╝ ██╔══██╗██╔═══██╗████╗  ██║
██████╔╝█████╗  ██║  ███╗██████╔╝██║   ██║██╔██╗ ██║
██╔═══╝ ██╔══╝  ██║   ██║██╔═══╝ ██║   ██║██║╚██╗██║
██║     ███████╗╚██████╔╝██║     ╚██████╔╝██║ ╚████║
╚═╝     ╚══════╝ ╚═════╝ ╚═╝      ╚═════╝ ╚═╝  ╚═══╝

        [ PEGPON - v1.2   @M9nx ]

PEGPON - Subdomain & Web Recon Automation

PEGPON is an advanced Bash-based automation tool for subdomain enumeration, fuzzing, and web reconnaissance.
It leverages top-tier tools like subfinder, assetfinder, ffuf, httpx, gau, waybackurls, dirsearch, katana, and more.

Created by @M9nx for bug bounty

---

Features

• Passive & Active Subdomain Enumeration
• Multi-level subdomain fuzzing (3 levels deep)
• IP Resolution from all known sources
• HTTP probing & filtering
• Directory brute-force with extensions
• URL collection (Wayback, GAU, Katana)
• URL filtering by file type (JS, PHP, JSON, etc.)
• Fully automated per domain

---

API Keys

Set your API keys inside the script:

• Chaos [https://chaos.projectdiscovery.io/]
• GitHub [https://github.com/settings/tokens]
• SecurityTrails [https://securitytrails.com/]
• Netlas [https://docs.netlas.io/automation/how_to_get_api_key/]
• Zoomeye [https://www.zoomeye.ai/]
• ShrewdEye [https://shrewdeye.app/search]

---

Installation

git clone https://github.com/M9nx/pegpon
cd pegpon
chmod +x pegpon
sudo mv pegpon /usr/local/bin/

---

Setup

Before running PEGPON, make sure to configure the following:

---

1. Environment Variables (API Keys)

Export your API tokens to access passive data sources:

export CHAOS_KEY="your_chaos_api_token"
export GITHUB_TOKEN="your_github_api_token"
export SECURITYTRAILS_KEY="your_securitytrails_api_key"
export NETLAS_API_KEY="your_netlas_api_key"
export VT_API_KEY="your_virustotal_api_key"
export ZOOMEYE_API_KEY="your_zoomeye_api_key"

You can also add them permanently to your shell:

# ~/.bashrc or ~/.zshrc
export CHAOS_KEY="..."
export GITHUB_TOKEN="..."
...

---

2. Wordlists

FFUF Subdomain Fuzzing

Update the wordlist path used in run_active_recon():

wordlist="/usr/share/dirb/wordlists/subdomains-top1million-110000.txt"

You can replace it with:

• SecLists DNS wordlists
• assetnote wordlists

Dirsearch Directory Bruteforce

Edit the path to your Dirsearch wordlist if needed (in dirsearch/config.ini or via -e / -w flags).

---

3. Requirements

Make sure the following tools are installed:

Tool	Purpose
subfinder	Passive subdomain enum
assetfinder	Passive subdomain enum
sublist3r	Passive subdomain enum
ffuf	Subdomain fuzzing
dirsearch	Directory brute-forcing
findomain	Passive enum + takeover
httpx	Live host checking
jq	JSON parsing (API output)
dig	DNS resolution
curl	API/web requests

---

Let me know if you want me to generate a .env loader, or automate this whole setup with a setup.sh script

---

Usage

Single Domain

pegpon -d example.com

List of Domains

pegpon -l domains.txt

---

Output Structure

recon/
├── passive_subdomains.txt       # From passive recon tools
├── active_subdomains.txt        # From ffuf brute-force
├── final_live_subdomains.txt    # Filtered live subdomains (httpx/ping)
├── resolved_ips.txt             # Mapping: subdomain => IP
├── unique_ips.txt               # All deduplicated IPs
├── dirsearch_results/           # Directory bruteforce output
│   ├── dirsearch_domains.txt
│   ├── dirsearch_http_1.2.3.4.txt
│   └── ...
├── urls/                        # Categorized URLs from all_urls.txt
│   ├── js_urls.txt              # .js URLs
│   ├── php_urls.txt             # .php URLs
│   ├── aspx_urls.txt            # .aspx URLs
│   ├── jsp_urls.txt             # .jsp URLs
│   ├── json_urls.txt            # .json URLs
│   ├── txt_urls.txt             # .txt URLs
│   ├── html_urls.txt            # .html URLs
│   ├── css_urls.txt             # .css URLs
├── all_urls.txt                 # Aggregated URLs from gau/wayback/etc.

         

---

Contributing

We welcome contributions to PEGPON — whether it's fixing bugs, adding new recon modules, improving performance, or writing documentation. Your support helps make this tool more powerful for the bug bounty and security community.

---