Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/HJ23/Raptor
Passive subdomain enumeration tool with http-probe.
https://github.com/HJ23/Raptor
bug-bounties bug-bountry bug-hunter bugbounty cybersecurity enumeration hacking http-probe osint osint-python osint-tool probe probe-requests python python3 subdomain subdomain-enumeration subdomain-scanner subdomains subdomains-monitoring
Last synced: about 1 month ago
JSON representation
Passive subdomain enumeration tool with http-probe.
- Host: GitHub
- URL: https://github.com/HJ23/Raptor
- Owner: HJ23
- License: mit
- Created: 2021-03-11T21:24:44.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2021-04-30T07:44:12.000Z (about 3 years ago)
- Last Synced: 2024-02-22T10:43:40.244Z (5 months ago)
- Topics: bug-bounties, bug-bountry, bug-hunter, bugbounty, cybersecurity, enumeration, hacking, http-probe, osint, osint-python, osint-tool, probe, probe-requests, python, python3, subdomain, subdomain-enumeration, subdomain-scanner, subdomains, subdomains-monitoring
- Language: Python
- Homepage:
- Size: 120 KB
- Stars: 33
- Watchers: 4
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Lists
- awesome-hacking-lists - HJ23/Raptor - Passive subdomain enumeration tool with http-probe. (Python)
README
### Passive Subdomain Enumeration Tool with Http-Probe.
---
---
Raptor is a subdomain enumeration tool that discovers valid subdomains for websites passively.
Raptor designed to comply with all passive sources licenses, and usage restrictions but speed in mind.
This software currently employs 22 free and commercial services. (Constantly updated if any new resource out there.)
For better results I highly encourage you to get API keys.
Also http-probe included which means user can identify dead&alive subdomains and various open-ports easily.
Think this is useful? :star: Star us on GitHub — it helps!
### Usage
#### To install requirements execute the command below
```sh
pip3 install -r requirements.txt
```
#### Find subdomains of 'example.com' .
```sh
python3 main.py --domain example.com
Or
python3 main.py -d example.com
```
#### Specify filename and extension otherwise it will use default one.
```sh
python3 main.py --domain example.com --output example.txt
Or
python3 main.py -d example.com -o example.txt
```
#### For Outputs check outputs directory.
#### Use http-probe to identify dead & alive subdomains and various ports. (*This option will take for a while to finish)
```sh
python3 main.py --domain example.com --probe
Or
python3 main.py -d example.com -p
```
#### Verbose mode for details.
```sh
python3 main.py --domain example.com --output example.txt --verbose
Or
python3 main.py -d example.com -o example.txt -v
```
### Run with Docker
#### Build an image
```
docker build -t hj23/raptor .
```
#### Run in a container
```
docker run --rm -v $PWD/outputs:/outputs hj23/raptor -d example.com
```
#### API keys for commercial services.
```
These are the commercial services it uses:
- Bing
- BinaryEdge
- VirusTotal
- Shodan
- UrlScan
- Censys
But all these services provide free limited request package with automatic renewal basis.
for Bing limit is 1000 requests per month.
for BinaryEdge limit is 250 requests per month.
for VirusTotal limit is 500 requests per day.
for Shodan if you have academic email limit is 100 requests per month. (1 request = 100 result)
for UrlScan limit is 1000 requests per day.
for Censys limit is 250 requests per month.
```
### Having trouble with API keys ?
Check out our guide here :
[ How to get API keys for Raptor ? ](https://github.com/HJ23/Raptor/wiki)
### Why this tool works slower than others ?
Well faster not always means better. API calls might take reasonable amount of time.
But most importantly in order not to exceed limits stated above scripts adjusted not only for best performance but also best
for API call allowance.
#### Todo
- [ Add more sources ]()
----
#### Logo Credits : https://www.freepik.com/iyasalif