sage: ./domain_analyzer.py -d <domain> <options>
options:
  -h, --help                            Show this help message and exit.
  -V, --version                         Output version information and exit.
  -D, --debug                           Debug.
  -d, --domain                          Domain to analyze.
  -L <list>, --common-hosts-list <list> Relative path to txt file containing common hostnames. One name per line.
  -j, --not-common-hosts-names          Do not check common host names. Quicker but you will lose hosts.
  -t, --not-zone-transfer               Do not attempt to transfer the zone.
  -n, --not-net-block                   Do not attempt to -sL each IP netblock.
  -o, --store-output                    Store everything in a directory named as the domain. Nmap output files and the summary are stored inside.
  -a, --not-scan-or-active              Do not use nmap to scan ports nor to search for active hosts.
  -p, --not-store-nmap                  Do not store any nmap output files in the directory <output-directory>/nmap.
  -e, --zenmap                          Move xml nmap files to a directory and open zenmap with the topology of the whole group. Your user should have access to the DISPLAY variable.
  -g, --not-goog-mail                   Do not use goog-mail.py (embebed) to look for emails for each domain
  -s, --not-subdomains                  Do not analyze sub-domains recursively. You will lose subdomain internal information.
  -f, --create-pdf                      Create a pdf file with all the information.
  -l, --world-domination                Scan every gov,mil,org and net domains of every country on the world. Interesting if you don't use -s
  -r, --robin-hood                      Send the pdf report to every email found using domains the MX servers found. Good girl.
  -w, --not-webcrawl                    Do not web crawl every web site (in every port) we found looking for public web mis-configurations (Directory listing, etc.).
  -m, --max-amount-to-crawl             If you crawl, do it up to this amount of links for each web site. Defaults to 50.
  -F, --download-files                  If you crawl, download every file to disk.
  -c, --not-countrys                    Do not resolve the country name for every IP and hostname.
  -C, --not-colors                      Do not use colored output.
  -q, --not-spf                         Do not check SPF records.
  -k, --random-domains                  Find this amount of domains from google and analyze them. For base domain use -d
  -v, --ignore-host-pattern             When using nmap to find active hosts and to port scan, ignore hosts which names match this pattern. Separete them with commas.
  -x, --nmap-scantype                   Nmap parameters to port scan. Defaults to: '-O --reason --webxml --traceroute -sS -sV -sC -PN -n -v -F' .
  -b, --robtex-domains                  If we found a DNS server with zone transfer activated, search other UNrelated domains using that DNS server with robtex and analyze them too.
  -B, --all-robtex                      Like -b, but also if no Zone Transfer was found. Useful to analyze all the domains in one corporative DNS server. Includes also -b.
Press CTRL-C at any time to stop only the current step.