Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/gwen001/related-domains
Find related domains of a given domain.
https://github.com/gwen001/related-domains
bugbounty dns domains pentesting python security-tools
Last synced: 6 days ago
JSON representation
Find related domains of a given domain.
- Host: GitHub
- URL: https://github.com/gwen001/related-domains
- Owner: gwen001
- License: mit
- Created: 2022-11-17T13:11:09.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2023-08-05T15:05:21.000Z (over 1 year ago)
- Last Synced: 2024-06-19T23:28:32.829Z (5 months ago)
- Topics: bugbounty, dns, domains, pentesting, python, security-tools
- Language: Python
- Homepage:
- Size: 1.54 MB
- Stars: 90
- Watchers: 3
- Forks: 6
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE.md
Awesome Lists containing this project
README
related-domains
Find related domains of a given domain using Whoxy API.
---
## Description
This Python tool does not search for similar domains, it uses the informations of the domain you provide (contact email, organization...) to search for domains that have been registered by the same peoples/companies. So the results are quite reliable.
## Sources
Implemented sources are:
- builtwith.com
- whoxy.com
- crtsh
## Requirements
You need a [WHOXY API key](https://www.whoxy.com/) but it's free.
## Install
```
git clone https://github.com/gwen001/related-domains
cd related-domains
pip3 install -r requirements.txt
```
## Usage
```
$ python3 related-domains.py -d example.com -k xxxxxxxxxxxxxxxxxxxxxx
```
```
usage: related-domains.py [-h] [-e EMAIL] [-c COMPANY] [-d DOMAIN] [-k KEY] [-v]
options:
-h, --help show this help message and exit
-e EMAIL, --email EMAIL
email you are looking for (required or -d or -c)
-c COMPANY, --company COMPANY
company you are looking for (required or -d or -e)
-d DOMAIN, --domain DOMAIN
domain you already know (required or -c)
-k KEY, --key KEY whoxy api key (required)
-s SOURCE, --source SOURCE
list of sources separated by comma, available sources are: builtwith,crtsh,whoxy (default=whoxy)
-v, --verbose enable verbose mode, default off
```
## How it works
- whoxy, reliance: pretty good
get domains with the same infos (contact mails and company names) of the domain supplied
ex: paypal.com -> PayPal Inc.
- builtwith, reliance: not that bad
get domains that use the same tags of the domain supplied
ex: paypal.com -> UA-53389718
- crtsh, reliance: soso
performs an extended search using the supplied domain name without tld
ex: paypal.com -> %paypal%
## Changelog
- 2023-07-18: builtwith re-enabled and crtsh added
- 2023-04-28: remove builtwith because it was not relevant at all, fix a fatal bug
- 2023-03-26: code review & builtwith added
---
---
Feel free to [open an issue](/../../issues/) if you have any problem with the script.