Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/lem0nsec/subdue
A Python3 Compact Subdomain Fuzzing Tool for CTFs
https://github.com/lem0nsec/subdue
ctf fuzzing
Last synced: 12 days ago
JSON representation
A Python3 Compact Subdomain Fuzzing Tool for CTFs
- Host: GitHub
- URL: https://github.com/lem0nsec/subdue
- Owner: lem0nSec
- License: mit
- Created: 2022-01-26T17:18:48.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2023-01-10T08:11:33.000Z (about 2 years ago)
- Last Synced: 2024-11-15T01:11:48.409Z (2 months ago)
- Topics: ctf, fuzzing
- Language: Python
- Homepage:
- Size: 609 KB
- Stars: 2
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# Subdue - A Compact Subdomain Fuzzing Tool for CTFs
 
------------------------------------------------------------------------
Subdue is a Python3 script which aims to provide a quick and easy-to-use solution for subdomain fuzzing. It was born from a need to simplify and speed up the enumeration of virtual hosts in a CTF-like context, as well as to provide an alternative solution to more advanced tools performing general fuzzing operations.
## How it works
------------------------------------------------------------------------
Subdue will fuzz subdomains within a specified domain and using a given wordlist. A positive result is given when the values of 'content bytes' and 'content lines' for a potentially valid subdomain diverge from those of an invalid subdomain obtained using a 15-character random string.
**Bear in mind that Subdue has been written with CTF-like challenges in mind. For this reason, it may not be a suitable tool for real-world engagements. Use it responsibly!!**
## Usage:
------------------------------------------------------------------------
```
./subdue.py -h
@@@@@ @ @ @@@@@ @@@ @ @ @@@@@
@ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @
@@@@@ @ @ @ @@ @ @ @ @ @@@
@ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @
@@@@@ @@@@@ @@@@@ @@@ @@@@@ @@@@@
by Lem0nSec_
usage: subdue_dev.py [-h] -i I -d D -w W [-k] [-t T]
Welcome to Subdue! A compact subdomain fuzzing tool for CTFs
optional arguments:
-h, --help show this help message and exit
-i I Target IP
-d D Target domain
-w W Wordlist
-k SSL option
-t T Number of concurrent threads (default 5)
```
**Example:** `./subdue.py -i 10.10.10.10 -d test.site -w subdomains_example_list.txt -t 10`
## Requirements:
------------------------------------------------------------------------
- Requests: `pip3 install requests`
- Termcolor: `pip3 install termcolor`
## Threading support:
------------------------------------------------------------------
Subdue has recently implemented support for concurrent threads:
*Enjoy!!*