Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/ice3man543/subover

A Powerful Subdomain Takeover Tool
https://github.com/ice3man543/subover

bug-bounty bugbounty hostile hostile-subdomain-takeover pentesting subdomain subdomain-takeover subdomains takeover takeover-subdomain

Last synced: about 3 hours ago
JSON representation

A Powerful Subdomain Takeover Tool

Host: GitHub
URL: https://github.com/ice3man543/subover
Owner: Ice3man543
License: bsd-2-clause
Created: 2018-02-04T09:49:46.000Z (almost 7 years ago)
Default Branch: master
Last Pushed: 2023-10-17T19:35:44.000Z (about 1 year ago)
Last Synced: 2024-11-06T16:50:30.131Z (7 days ago)
Topics: bug-bounty, bugbounty, hostile, hostile-subdomain-takeover, pentesting, subdomain, subdomain-takeover, subdomains, takeover, takeover-subdomain
Language: Go
Homepage:
Size: 158 KB
Stars: 929
Watchers: 28
Forks: 198
Open Issues: 14
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

README

# SubOver
## Note - This project is discontinued. No more updates will be provided! Sorry!
> But something more awesome will come soon!

Subover is a Hostile Subdomain Takeover tool originally written in python but rewritten from scratch in Golang. Since it's redesign, it has been aimed with speed and efficiency in mind. Till date, SubOver detects 30+ services which is much more than any other tool out there. The tool uses Golang concurrency and hence is very fast. It can easily detect and report potential subdomain takeovers that exist. The list of potentially hijackable services is very comprehensive and it is what makes this tool so powerful.

## Installing

You need to have Golang installed on your machine. There are no additional requirements for this tool.

```sh
go get github.com/Ice3man543/SubOver
```

> NOTE - Do not change the location of providers.json file. Or the tool will not work.

## Usage

` ./SubOver -l subdomains.txt`
- `-l` List of Subdomains
- `-a` Check all hosts regardless of CNAME (Time Consuming and prone to fp's)
- `-t` Number of concurrent threads. (Default 10)
- `-v` Show verbose output (Default False)
- `-https` Force HTTPS Connection (Default HTTP)
- `-timeout` Set custom timeout (Default 10)
- `-h` Show help message

## Currently Checked Services

> Github, Heroku, Unbounce, Tumblr, Shopify, Instapage, Desk, Tictail, Campaignmonitor, Cargocollective, Statuspage, Amazonaws, Cloudfront, Bitbucket, Smartling, Acquia, Fastly, Pantheon, Zendesk, Uservoice, Ghost, Freshdesk, Pingdom, Tilda, Wordpress, Teamwork, Helpjuice, Helpscout, Cargo, Feedpress, Surge, Surveygizmo, Mashery, Intercom, Webflow, Kajabi, Thinkific, Tave, Wishpond, Aftership, Aha, Brightcove, Bigcartel, Activecompaign, Compaignmonitor, Acquia, Proposify, Simplebooklet, Getresponse, Vend, Jetbrains, Azure

Count : 51

## Screenshot
![tool_in_action](https://raw.githubusercontent.com/Ice3man543/SubOver/master/subover.png)

## FAQ
**Q:** What should my wordlist look like?

**A:** Your wordlist should include a list of subdomains you're checking and should look something like:
```
backend.example.com
something.someone.com
apo-setup.fxc.something.com
```

## Your tool sucks!

Yes, you're probably correct. Feel free to:

- Not use it.
- Show me how to do it better.

## TODO

- Add more services :-)
- Improve the tool (There are many things that can be done :-) )

## Development

Want to contribute? Great!

You can add more services or recommend any changes to the existing ones. Any kind of help is appreciated.

Or buy me a coffee \o/

[![Buy me a coffee](https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png)](https://www.buymeacoffee.com/Ice3man)
[![ko-fi](https://www.ko-fi.com/img/donate_sm.png)](https://ko-fi.com/M4M7FAVC)

License
----

BSD 2-Clause "Simplified" License

## Contact

Meet me on Twitter: [![Twitter](https://img.shields.io/badge/[email protected])](https://twitter.com/ice3man543)

## Changelog

### [1.2] 2018-05-19
- Refactored whole code making it cleaner
- Added better error handling and more verbose stuff
- Implemented checking all domains
- Fixed other stuff, etc...

### [1.1.1] - 2018-03-20

- Providers corrected using EdOverflow's Awesome List
- Added Information regarding various takeovers to the tool

### [1.1.0] - 2018-03-16

- Rewritten from scratch in Golang
- This time it's damn fast because of Go Concurrency.
- The console output looks better :-)

### [1.0.0] - 2018-02-04

- Initial Release with 35 Services written in Python.
- Pretty Slow :-)

## Credits

- [subjack : Hostile Subdomain Takeover Tool Written In GO](https://github.com/haccer/subjack)
- [Subdomain Takeover Scanner by 0x94](https://github.com/antichown/subdomain-takeover)
- [Anshumanbh : tko-subs](https://github.com/anshumanbh/tko-subs)
- [EdOverflow : can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz)