An open API service indexing awesome lists of open source software.

https://github.com/mamad4ever/brutes

enumerates subdomains with fuzzing.
https://github.com/mamad4ever/brutes

brute-force bug-bounty fuzzing subdomain subdomain-bruteforcing subdomain-enumeration subdomain-scanner

Last synced: 6 months ago
JSON representation

enumerates subdomains with fuzzing.

Awesome Lists containing this project

README

          

# Installation
```bash
git clone https://github.com/MaMad4Ever/Brutes.git
```
```bash
pip3 install -r requirements.txt
```

## Wordlist recommendations
- **n0kovo's** wordlists: [Can be downloaded from here](https://github.com/n0kovo/n0kovo_subdomains)
- **assetnote** wordlists: [Can be downloaded from here](https://wordlists.assetnote.io)
- **megalist** wordlists: [Can be downloaded from here](https://github.com/netsecurity-as/subfuz/blob/master/subdomain_megalist.txt)
- **SecLists** wordlists: [Can be downloaded from here](https://github.com/danielmiessler/SecLists)

## Usage
```bash
python3 brutes.py -d example.com
```
```bash
python3 brutes.py -d example.com -m http
```
```console
Switch:
-h, --help (show this help message and exit)
-d DOMAIN, --domain (DOMAIN Enter the Domain Name)
-u, --show-unreachable (Show unreachable URLs)
-t THREADS, --threads THREADS (Number of threads to use (default: 10))
-w WORDLIST, --wordlist WORDLIST (Path to the wordlist file (default:subdomain_names.txt)
-m {http,https}, --mode {http,https} (Protocol to use (default: https))
-s, --silent (Run scanner silently)
-o OUTPUT, --output OUTPUT (Save reachable subdomains to a file)
--timeout TIMEOUT (Request timeout in seconds (default: 5))
```