Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/nexxai/Substr3am
Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates being issued
https://github.com/nexxai/Substr3am
certstream dns python ssl subdomain-enumeration
Last synced: about 2 months ago
JSON representation
Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates being issued
- Host: GitHub
- URL: https://github.com/nexxai/Substr3am
- Owner: nexxai
- License: gpl-3.0
- Created: 2019-04-13T18:12:20.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2022-10-11T18:01:10.000Z (almost 2 years ago)
- Last Synced: 2024-06-15T00:46:19.449Z (3 months ago)
- Topics: certstream, dns, python, ssl, subdomain-enumeration
- Language: Python
- Homepage:
- Size: 33.2 KB
- Stars: 64
- Watchers: 4
- Forks: 8
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-bugbounty-tools - Substr3am - Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates being issued (Recon / Subdomain Enumeration)
README
# Substr3am
Substr3am is a python tool inspired by [subbrute](https://github.com/TheRook/subbrute) and [Sublist3r](https://github.com/aboul3la/Sublist3r) designed to generate a list of potential subdomains using the [certstream](https://github.com/CaliDog/certstream-python) service. It helps penetration testers and bug hunters collect and gather subdomains for their lists by connecting to the certstream firehose, watching for real subdomains, and adding them to a list for use with the above tools.
## Installation
```
git clone https://github.com/nexxai/Substr3am.git
```
## Recommended Python Version:
Substr3am currently supports **Python 3**. Stop using **Python 2**. I suck at Python and even I know that.
* The recommended version for Python 3 is **3.8.x**
NOTE: There is currently an issue with a dependency and Python v3.9 so do not upgrade to that version for now as you will receive websockets errors until the dependency is updated.
## Dependencies:
Substr3am depends on the `certstream`, `argparse`, `tldextract`, and `sqlalchemy` python modules.
These dependencies can be installed using the requirements file:
- Installation on Windows:
```
c:\python\python.exe -m pip install -r requirements.txt
```
- Installation on Linux / MacOS:
```
sudo pip3 install -r requirements.txt
```
## Usage
Short Form | Long Form | Description
------------------------ | ------------------------------ |-------------
`./Substr3am` | | Start collecting subdomains and write them to the subdomains.db sqlite DB
`./Substr3am -f [DOMAINS]` | `./Substr3am --filter [DOMAINS]` | A space-separated list of domain names to filter for (e.g. 'google.com' or 'tesco.co.uk tesco.com harrods.com'). *BE PATIENT* - if you are filtering by domain(s), there will only be activity when new certs are issued so just let it run and it'll announce when it sees any new ones.
`./Substr3am -d` | `./Substr3am --dump` | Dump the list of collected subdomains to names.txt
### Examples
* To only return results for a particular list of domains
```python3 Substr3am.py -f google.com google.cn microsoft.com uber.com```
* To export your collected subdomains from the sqlite DB to a file called 'names.txt
```python3 Substr3am.py -d```
## License
Substr3am is licensed under the GNU GPL license. take a look at the [LICENSE](https://github.com/nexxai/Substr3am/blob/master/LICENSE) for more information.
## Credits
* [aboul3la](https://github.com/aboul3la) - Substr3am's code was inspired by his wonderful tool **Sublist3r**
* [CaliDog](https://github.com/CaliDog) - For providing the awesome **certstream** service
## Version
**Current version is 1.0**