CLI reference

d0pam1ne recon [--profile fast|stealth|normal|deep] [--only STAGES] [--skip STAGES] [--resume] [--yes]

# A quick, authorized run of just the surface
d0pam1ne recon --profile fast --only subdomains,dns,ports,web --yes

# Resume an interrupted deep run
d0pam1ne recon --profile deep --resume

d0pam1ne results [--run ID]        # show the results of the last (or a given) run
d0pam1ne report  [--run ID] [--open]   # one-page HTML summary, saved in the run folder
d0pam1ne attack  [category]        # in-scope target lists and tested commands (nothing runs)

d0pam1ne project new --name "Acme" --client "Acme Inc" --in "*.acme.com" --in "203.0.113.0/24"
d0pam1ne project list
d0pam1ne project use acme
d0pam1ne project show
d0pam1ne project scope --in "api.acme.com" --remove "staging.acme.com"
d0pam1ne project nmap --preset aggressive --protocols both
d0pam1ne project settings --set naabu.ports=full --set katana.depth=3
d0pam1ne project check https://app.acme.com   # is this target in scope? (exit 3 if not)

# What recon will do for each rule, before a run
d0pam1ne scope plan --in "*.acme.com" --out "staging.acme.com" --json

d0pam1ne doctor [--missing] [--nmap] [--json]   # check tools and system
d0pam1ne tools list
d0pam1ne tools install --core      # the default pipeline
d0pam1ne tools install --all       # recon, OSINT and attack
d0pam1ne tools install --attack    # just the attack set
d0pam1ne tools update
d0pam1ne wordlists status
d0pam1ne wordlists install [--full]   # SecLists (core folders, or ~2 GB full)
d0pam1ne update [--check]          # update the engine itself from GitHub