An open API service indexing awesome lists of open source software.

https://github.com/bitfede/subomain-examiner

Gets a list of subdomains, port scans them and reports them back by open port and service name
https://github.com/bitfede/subomain-examiner

Last synced: 8 months ago
JSON representation

Gets a list of subdomains, port scans them and reports them back by open port and service name

Awesome Lists containing this project

README

          

# Subdomain Examiner

## What is it?

A simple recon tool that allows you to scan a whole list of subdomains and identify which of these servers have open services.

Requires superuser permission to run because it uses the nmap SYN scan. Make sure you review and acknowledge the code before running it on your system.

## How do I install it?

1. `git clone` this repo
2. make sure python3-nmap is installed. Install it with `sudo apt install python3-nmap`
3. create a symlink with `ln -s /path/to/subdomain-examiner/subdomain-examiner/app.py ~/bin/subdomain-examiner` (make sure `~/bin` or whatever you want to use exists)
4. make sure `~/bin` or whatever you are using is in `$PATH` if not add it yourself
5. test successful installation with `subdomain-examiner -h`

## How do I use it?

Command usage:
```
sudo subdomain-examiner -i subdomains.txt
```

The argument `subdomains.txt` has one subdomain per line:
```
subdomain1.example.com
subdomain2.example.com
subdomain3.example.com
subdomain4.example.com
```

The examiner will start port scanning them one by one and create different text files depending which subdomains have which port open. All these report files are saved in a directory named with the present timestamp.

## DISCLAIMER

Do NOT use this software for malicious purposes, I am not responsible for whatever damage you cause.

Make sure you have explicit permission from the subdomains owner before testing them.