{"id":13617280,"url":"https://github.com/bit4woo/domain_hunter_pro","last_synced_at":"2025-05-14T11:09:00.107Z","repository":{"id":37107207,"uuid":"166361684","full_name":"bit4woo/domain_hunter_pro","owner":"bit4woo","description":"domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等","archived":false,"fork":false,"pushed_at":"2025-05-13T08:26:50.000Z","size":25257,"stargazers_count":2044,"open_issues_count":13,"forks_count":203,"subscribers_count":24,"default_branch":"master","last_synced_at":"2025-05-13T09:34:15.377Z","etag":null,"topics":["bit4woo","domain-collection","domain-discovery","domain-hunter","get-web-title","info-gather","related-domain","similar-domain","sub-domain","subject-alternative-name","traffic-analysis","web-title"],"latest_commit_sha":null,"homepage":"https://www.bilibili.com/video/BV1eA411P7xC/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bit4woo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-01-18T07:15:15.000Z","updated_at":"2025-05-13T08:26:54.000Z","dependencies_parsed_at":"2023-02-05T20:15:59.958Z","dependency_job_id":"f35d8c43-30eb-49bc-a80d-9316ce2e3127","html_url":"https://github.com/bit4woo/domain_hunter_pro","commit_stats":{"total_commits":1120,"total_committers":2,"mean_commits":560.0,"dds":0.008035714285714257,"last_synced_commit":"9ec5a40dba1ba64edea245a7dc9223029c02f795"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bit4woo%2Fdomain_hunter_pro","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bit4woo%2Fdomain_hunter_pro/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bit4woo%2Fdomain_hunter_pro/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bit4woo%2Fdomain_hunter_pro/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bit4woo","download_url":"https://codeload.github.com/bit4woo/domain_hunter_pro/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254129484,"owners_count":22019628,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bit4woo","domain-collection","domain-discovery","domain-hunter","get-web-title","info-gather","related-domain","similar-domain","sub-domain","subject-alternative-name","traffic-analysis","web-title"],"created_at":"2024-08-01T20:01:39.452Z","updated_at":"2025-05-14T11:09:00.078Z","avatar_url":"https://github.com/bit4woo.png","language":"Java","funding_links":[],"categories":["Java","SRC批量工具"],"sub_categories":["domain_hunter_pro"],"readme":"# domain hunter pro\n\n你还在用Excel进行目标管理吗？\n\n你还在为收集目标的信息而烦恼吗？\n\n你还在测试时不停地复制粘贴吗？\n\n那么来试试 [domain hunter pro](https://github.com/bit4woo/domain_hunter_pro) 吧！方便快捷的目标管理、自动化的信息收集、与burp无缝衔接、与外部安全工具联动...\n\n这是一个帮助 SRC白帽子、安全测试工程师提高效率的工具！\n\n我mmmark 师傅的御用工具之一！\n\n# 作者和贡献者\n\n[bit4woo](https://github.com/bit4woo)\n\nmmmark （很多核心思路都来自他宝贵的实战经验！）\n\n# 快速上手\n\n### 下载安装\n\n下载jar包 https://github.com/bit4woo/domain_hunter_pro/releases\n\n获取软件的Jar包，由于该软件是基于BurpSuite的插件程序。需要与BurpSuite一起使用。\n\n![image-20201217105403971](img/README/image-20201217105403971.png)\n\n安装后的界面效果\n\n![image-20201217110021821](img/README/image-20201217110021821.png)\n\n### 创建项目文件（SQLLITE DB）\n\n创建一个新的项目，也可以打开已有的项目文件（xxx.db）\n\n![image-20201217110750673](img/README/image-20201217110750673.png)\n\n![image-20201217110955197](img/README/image-20201217110955197.png)\n\n\n\n### 主域名管理\n\n主域名是实现目标管理的核心，所有相关域名、子域名、相似域名、邮箱地址、Java包名称都是以主域名作为依据的。比如我们以baidu.com为例\n\n![image-20201217111105540](img/README/image-20201217111105540.png)\n\n通过代理浏览器访问baidu.com，收集其流量\n\n![image-20201217111235527](img/README/image-20201217111235527.png)\n\n通过search功能，从流量中提取百度相关的所有域名\n\n![image-20201217111403035](img/README/image-20201217111403035.png)\n\n![image-20201217111543496](img/README/image-20201217111543496.png)\n\n\n\n### 访问web获取title\n\n![image-20201217113255944](img/README/image-20201217113255944.png)\n\n\n\n目标网站管理，右键菜单可以和浏览器联动、也可以和burp的功能联动\n\n![image-20201217113610485](img/README/image-20201217113610485.png)\n\nTitle搜索功能\n\n![image-20201217113714460](img/README/image-20201217113714460.png)\n\n\n\n![image-20201217113748872](img/README/image-20201217113748872.png)\n\n### Tools Tab功能介绍\n\n![image-20201217114341047](img/README/image-20201217114341047.png)\n\n\n\n\n\n# 自行打包使用最新功能\n\n下载最新构建\n\n![image-20231117153639907](assets/image-20231117153639907.png)\n\n\n\n\n\n1、如果使用过GitHub Packages，直接运行如下命令即可\n\n```\ngit clone https://github.com/bit4woo/domain_hunter_pro\ncd domain_hunter_pro\nmvn package\n```\n\n可以在domain_hunter_pro/target/路径下找到对应Jar包。\n\n\n\n2、如果没有使用过GitHub Packages，则需要创建或修改/Users/xxxxxx/.m2/setttings.xml 文件\n\nhttps://github.com/settings/tokens\n\n```xml\n\u003csettings xmlns=\"http://maven.apache.org/SETTINGS/1.0.0\"\n  xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\n  xsi:schemaLocation=\"http://maven.apache.org/SETTINGS/1.0.0\n                      http://maven.apache.org/xsd/settings-1.0.0.xsd\"\u003e\n\n  \u003cactiveProfiles\u003e\n    \u003cactiveProfile\u003egithub\u003c/activeProfile\u003e\n  \u003c/activeProfiles\u003e\n\n  \u003cprofiles\u003e\n    \u003cprofile\u003e\n      \u003cid\u003egithub\u003c/id\u003e\n      \u003crepositories\u003e\n        \u003crepository\u003e\n          \u003cid\u003ecentral\u003c/id\u003e\n          \u003curl\u003ehttps://repo1.maven.org/maven2\u003c/url\u003e\n        \u003c/repository\u003e\n        \u003crepository\u003e\n          \u003cid\u003egithub\u003c/id\u003e\n          \u003curl\u003ehttps://maven.pkg.github.com/bit4woo/*\u003c/url\u003e\n          \u003csnapshots\u003e\n            \u003cenabled\u003etrue\u003c/enabled\u003e\n          \u003c/snapshots\u003e\n        \u003c/repository\u003e\n      \u003c/repositories\u003e\n    \u003c/profile\u003e\n  \u003c/profiles\u003e\n\n  \u003cservers\u003e\n    \u003cserver\u003e\n      \u003cid\u003egithub\u003c/id\u003e\n      \u003cusername\u003e你的GitHub用户名\u003c/username\u003e\n      \u003cpassword\u003e你的GitHub access token 通过https://github.com/settings/tokens获取\u003c/password\u003e\n    \u003c/server\u003e\n  \u003c/servers\u003e\n\n    \u003cproperties\u003e  \n        \u003cproject.build.sourceEncoding\u003eUTF-8\u003c/project.build.sourceEncoding\u003e  \n        \u003cmaven.compiler.encoding\u003eUTF-8\u003c/maven.compiler.encoding\u003e  \n    \u003c/properties\u003e \n\u003c/settings\u003e\n\n```\n\n`\u003c/repository\u003e` 和`\u003cserver\u003e` 中的内容是你需要配置的。` \u003crepository\u003e`中的内容你可以直接复制粘贴。\n\n```xml\n       \u003crepository\u003e\n          \u003cid\u003egithub\u003c/id\u003e\n          \u003curl\u003ehttps://maven.pkg.github.com/bit4woo/*\u003c/url\u003e\n          \u003csnapshots\u003e\n            \u003cenabled\u003etrue\u003c/enabled\u003e\n          \u003c/snapshots\u003e\n        \u003c/repository\u003e\n```\n而`\u003cserver\u003e` 中的内容就必须用自己的了。通过https://github.com/settings/tokens获取你的GitHub access token\n\n```\n    \u003cserver\u003e\n      \u003cid\u003egithub\u003c/id\u003e\n      \u003cusername\u003e你的GitHub用户名\u003c/username\u003e\n      \u003cpassword\u003e你的GitHub access token 通过https://github.com/settings/tokens获取\u003c/password\u003e\n    \u003c/server\u003e\n```\n\n完成后再进行步骤一的操作即可。\n\n\n\n# 功能简介\n\n### Domains tab：目标管理和信息收集\n\n- 基于burp流量自动化信息收集（子域名、相关域名、相似域名、邮箱、Java包名）\n- 支持对主域名的权威服务器进行域传送（zone transfer）漏洞检测以获取信息\n- 支持域名黑名单排除\n- 支持IP网段作为目标范围\n- 支持IP:port作为目标\n- 支持右键在google和GitHub搜索选中内容\n- ....\n\n### Titles tab：进度管理和操作联动\n\n- 多线程请求子域名的80或433端口，获取web title、IP地址、CDN等目标信息\n- 支持排序、搜索、添加备注、标记重要程度、标记是否完成检测\n- 搜索方法支持：文本搜索、类似dork搜索（搜索主机名、端口、IP、长度等）\n- 双击用指定浏览器打开对应url地址\n- 双击使用默认浏览器的google进行指定域名或host的搜索\n- 与burp联动处理当前目标网站的请求\n\n### Tools tab：简单的配置管理和一些小功能\n\n- 调用外部默认浏览器或指定浏览器循环打开多个URL地址\n- 将多行数据转换成List\n- 将多行数据转成数组\n- 解析JSON数据，从中提取指定字段的值\n- 查找包含指定字符串的行\n- IP和网段的互相转换\n- HTML、Unicode编码的解码\n\n### 右键菜单：目标管理\n\n- 将选中URL添加到目标管理器中\n- 将选中域名添加到目标管理器中\n- 在目标管理中查找当前选择URL，如果存在则为其添加备注说明\n- 在目标管理中查找当前选择URL，如果存在则设置其重要程度、是否完成检测任务\n- 启动一个新的线程，对所有目标网站发送相同的请求，解析其返回包，获取指定目标\n\n# 功能菜单详细说明\n\n### Domains tab：目标管理和信息收集\n\n- 基于burp流量自动化信息收集（子域名、相关域名、相似域名、邮箱、Java包名）\n- 支持对主域名的权威服务器进行域传送（zone transfer）漏洞检测以获取信息\n- 支持域名黑名单排除\n- 支持IP网段作为目标范围\n- 支持IP:port作为目标\n- 支持右键在google和GitHub搜索选中内容\n- ....\n\n### Titles tab：进度管理和操作联动\n\n- 多线程请求子域名的80或433端口，获取web title、IP地址、CDN等目标信息\n- 支持排序、搜索、添加备注、标记重要程度、标记是否完成检测\n- 搜索方法支持：文本搜索、类似dork搜索（搜索主机名、端口、IP、长度等）\n- 双击用指定浏览器打开对应url地址\n- 双击使用默认浏览器的google进行指定域名或host的搜索\n- 与burp联动处理当前目标网站的请求\n\n### Tools tab：简单的配置管理和一些小功能\n\n- 调用外部默认浏览器或指定浏览器循环打开多个URL地址\n- 将多行数据转换成List\n- 将多行数据转成数组\n- 解析JSON数据，从中提取指定字段的值\n- 查找包含指定字符串的行\n- IP和网段的互相转换\n- HTML、Unicode编码的解码\n\n### 右键菜单：目标管理\n\n- 将选中URL添加到目标管理器中\n- 将选中域名添加到目标管理器中\n- 在目标管理中查找当前选择URL，如果存在则为其添加备注说明\n- 在目标管理中查找当前选择URL，如果存在则设置其重要程度、是否完成检测任务\n- 启动一个新的线程，对所有目标网站发送相同的请求，解析其返回包，获取指定目标\n\n# 一些处理逻辑说明\n\n## IP汇算逻辑\n\n根据目标设定收集到很多子域名自后，可以在title Panel中点击“get title”进行请求。请求之后会获得一些列IP地址。\n\n\n\n把IP进行汇总，得出一个个最小网段（不一定是C段）：\n\n```\n比如：\n8.8.8.8\n8.8.8.10\n汇算得到\n8.8.8.8/30\n\n比如：\n8.8.8.8\n8.8.8.20\n汇算得到\n8.8.8.0/27\n```\n\n\n\n参数汇算的IP集合，应该排除CDN的IP集合\n\nHOST是域名，且ASN不属于目标公司或组织的（多半属于腾讯云、华为云、cloudflare等CDN或云服务提供商），这类资产多半是使用了CDN。这类资产的IP集合，就不应该参数目标网段的汇算，需要自己通过“Add Host To Black List”来标记。\n\nHOST是IP地址，且ASN不属于目标公司或组织的，应当被视作非目标资产，直接删除。\n\n```\n\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbit4woo%2Fdomain_hunter_pro","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbit4woo%2Fdomain_hunter_pro","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbit4woo%2Fdomain_hunter_pro/lists"}