https://github.com/Fadavvi/Sub-Drill

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.
https://github.com/Fadavvi/Sub-Drill

bug-bounty bugbounty recon reconnaissance red-team red-teaming subdomain subdomain-brute subdomain-bruteforcing subdomain-enumeration subdomain-finder web-recon web-reconnaissance

Last synced: 21 days ago
JSON representation

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

• Host: GitHub
• URL: https://github.com/Fadavvi/Sub-Drill
• Owner: Fadavvi
• Created: 2020-03-08T16:35:48.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2024-11-01T22:05:36.000Z (about 1 month ago)
• Last Synced: 2024-11-01T23:17:29.229Z (about 1 month ago)
• Topics: bug-bounty, bugbounty, recon, reconnaissance, red-team, red-teaming, subdomain, subdomain-brute, subdomain-bruteforcing, subdomain-enumeration, subdomain-finder, web-recon, web-reconnaissance
• Language: Shell
• Homepage:
• Size: 60.5 KB
• Stars: 103
• Watchers: 3
• Forks: 30
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - Fadavvi/Sub-Drill - A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements. (Shell)

README

        
# Sub-Drill

A very [very] simple and pipe-able script for finding subdomains based on [free] online services without any dependency to API-keys for penetration testers and bug bounty hunters.

#### usage:

```bash

chmod +x Sub-Drill.sh

./Sub-Drill.sh [Domain.Com] [optional-output-file]

```

#### Used services:

- threatcrowd

- hackertarget

- crt.sh

- certspotter

- spyse.com

- bufferover.run [tls,dns]

- urlscan.io

- synapsint.com

- jldc.me (anubis)

- omnisint.io (SonarSearch)

- alienvault [otx]

- riddler.io

- suip.biz [Amass,Subfinder]

- rapiddns.io

- web.archive.org

- securitytrails.com

- certificatedetails.com

- columbus.elmasy.com

- webscout.io

- api.subdomain.center

#### Dependencies:

- Curl 

- ~~jq~~