https://github.com/appsecco/the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"
https://github.com/appsecco/the-art-of-subdomain-enumeration

Last synced: 7 days ago
JSON representation

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

• Host: GitHub
• URL: https://github.com/appsecco/the-art-of-subdomain-enumeration
• Owner: appsecco
• Created: 2018-01-02T07:20:29.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2019-01-30T04:21:32.000Z (almost 6 years ago)
• Last Synced: 2024-08-01T03:27:30.644Z (3 months ago)
• Language: Python
• Homepage: https://appsecco.com/books/subdomain-enumeration/
• Size: 86.9 KB
• Stars: 633
• Watchers: 26
• Forks: 151
• Open Issues: 4
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-tools - Appsecco - The art of subdomain enumeration - The supplement material for the book "The art of sub-domain enumeration" (Asset Discovery / Domain / Subdomain Discovery)
• Awesome-Asset-Discovery - Appsecco - The art of subdomain enumeration - domain enumeration" ([↑](#contents)Domain / Subdomain Discovery)

README

        
## The art of subdomain enumeration

- This repository contains all the supplement material for the book "The art of subdomain enumeration"

- The book is available here: https://appsecco.com/books/subdomain-enumeration/

1. `censys_subdomain_enum.py` - Extract subdomains for a given domain using Censys.io API

2. `cheatsheet.pdf` - cheat sheet for the subdomain enumeration techniques

3. `cloudflare_subdomain_enum.py` - A script to do DNS enumeration using Cloudflare service

4. `crtsh_enum_psql.py` - Extract subdomains for a given domain using crt.sh postgres interface(Python)

5. `crtsh_enum_psql.sh` - Extract subdomains for a given domain using crt.sh postgres interface(shell script)

6. `crtsh_enum_web.py` - Extract subdomains for a given domain using crt.sh by scraping the web page(Python3)

7. `san_subdomain_enum.py` - Extract domains/subdomains listed in Subject Alternate Name(SAN) of SSL/TLS cert for a domain

8. `virustotal_subdomain_enum.py` - Extract subdomains for a given domain using VirusTotal API

### Feedback/Suggestions

[@0xbharath](https://twitter.com/0xbharath)