{"id":20032440,"url":"https://github.com/prvvv/submapper","last_synced_at":"2026-05-19T03:04:56.853Z","repository":{"id":192125259,"uuid":"686114827","full_name":"Prvvv/submapper","owner":"Prvvv","description":"A subdomain enumeration tool designed to find WAF's and 404 pages for takeover and enumeration","archived":false,"fork":false,"pushed_at":"2024-01-01T12:03:51.000Z","size":125,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-12T18:12:31.631Z","etag":null,"topics":["404","404-page","amazon","bug-bounty","bugbounty","cloudflare","python3","subdomain-enumeration","subdomain-scanner","subdomain-takeover","waf-detection"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Prvvv.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-09-01T19:29:01.000Z","updated_at":"2023-10-03T10:20:46.000Z","dependencies_parsed_at":"2023-12-23T22:39:26.621Z","dependency_job_id":"c5d9a00f-5ccf-4f81-b6be-10a89437ce53","html_url":"https://github.com/Prvvv/submapper","commit_stats":null,"previous_names":["prvvv/submapper"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Prvvv%2Fsubmapper","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Prvvv%2Fsubmapper/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Prvvv%2Fsubmapper/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Prvvv%2Fsubmapper/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Prvvv","download_url":"https://codeload.github.com/Prvvv/submapper/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241463737,"owners_count":19967104,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["404","404-page","amazon","bug-bounty","bugbounty","cloudflare","python3","subdomain-enumeration","subdomain-scanner","subdomain-takeover","waf-detection"],"created_at":"2024-11-13T09:37:05.300Z","updated_at":"2026-05-19T03:04:56.803Z","avatar_url":"https://github.com/Prvvv.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Submapper\n## A subdomain enumeration tool desgined to find WAF'S and Vulnerable 404 pages.\n\n## Submapper can detect:\n\n- Amazon WAF's \n- Cloudflare WAF's \n- 404 Pages (Potentially Vulnerable to takeover)\n- Subdomains Public IP Address and ISP data \n\n## How it works:\n\nSubmapper sends a constant but discrete stream of HTTP/1.1 requests to commonly listed sudomains found on most websites and domains.\n\nSubmapper uses 3 main techniques all at once to gather as many potential subdomains as possible.\n\n***Brute force:***  submapper uses brute force ranging from small text ranges (a-z/aaaaa - zzzzz) and numerical ranges (1 - 10/1 - 1000) ect, to find short charactered and numbered subdomains.\n\n***wordlisting:*** submapper also uses many wordlists made up of common names, directories, services ect that other mainstream site builders and domains use to list out many potentially interesting or vulnerable subdomains.\n\n***common directory listing:*** along with using common words, submapper also uses confirmed subdomains known to appear on other websites, using many different common names of pluggins and services to best find and enumerate otherwise tricky subdomain names.\n\n## Efficiency\n\nAll while remaining as un-noisy as possible, submapper uses only ***1*** file and multiple different threads on each task.\n\nSubmapper will also index all currently found subdomains and list them in its own cache to avoid finding the same subdomain twice, giving the best and most reliable results.\n\n![](https://i.ibb.co/59ctRJZ/submapper.png)\n\n## Installation\n\nSubmapper requires ***python3.9+*** with ***pip3 or higher*** installed with the following dependancies:\n\n- Colorama (https://pypi.org/project/colorama/)\n\n- Faker (https://pypi.org/project/Faker/)\n\n- Requests (https://pypi.org/project/requests/)\n\nCurrently works and tested on:\n\n- ***Linux Debian***\n- ***Windows 10/11***\n\n\n\n\n\n\n\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fprvvv%2Fsubmapper","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fprvvv%2Fsubmapper","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fprvvv%2Fsubmapper/lists"}