https://github.com/nmmapper/censys-subdomain-finder-non-api

Using censys to find subdomains but without the APIs just scrapping
https://github.com/nmmapper/censys-subdomain-finder-non-api

censys censys-subdomain-finder find-subdomains theharvester

Last synced: 28 days ago
JSON representation

Using censys to find subdomains but without the APIs just scrapping

• Host: GitHub
• URL: https://github.com/nmmapper/censys-subdomain-finder-non-api
• Owner: nmmapper
• License: mpl-2.0
• Created: 2019-11-14T13:08:28.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2020-05-13T20:08:17.000Z (about 5 years ago)
• Last Synced: 2024-11-17T01:28:49.635Z (7 months ago)
• Topics: censys, censys-subdomain-finder, find-subdomains, theharvester
• Language: Python
• Homepage: https://www.nmmapper.com
• Size: 19.5 KB
• Stars: 14
• Watchers: 1
• Forks: 2
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-ip-search-engines - Censys Subdomain Finder (no API)

README

        


# censys-subdomain-finder-none-api

Using censys to find subdomains but without the APIs. Censys is a a known service offering lots of information on a variety of networks. That is what we use on our online service, only if we have hit the limit given to us. Thanks to Censys search.

[![N|Solid](https://www.nmmapper.com/static/img/logo.png)](https://www.nmmapper.com/sys/tools/subdomainfinder/)

Part of this code is taken from theharvester as it currently uses the none api approach.- [theHarvester online](https://www.nmmapper.com/kalitools/theharvester/email-harvester-tool/online/)

# Dependencies!

   - beautifulsoup4

   - censys

   - dnspython

   - requests

```sh

$ pip3 install -r requirements.txt

```

```sh

$ python3 censys_subdomain_finder.py  -d nmmapper.com

	Searching certificates results page 2.

	Searching certificates results page 3.

	Searching certificates results page 4.

	Searching certificates results page 5.

[

    "p352931.goaccess.nmmapper.com",

    "clk.nmmapper.com",

    "d1.nmmapper.com",

    "*.nmmapper.com",

    "celery.nmmapper.com",

    "www.nmmapper.com",

    "a2.nmmapper.com",

    "p352931.nmmapper.com",

    "analytics.nmmapper.com",

    "p352931-cdn.nmmapper.com",

    "upstream.d.nmmapper.com",

    "p0-cdn.nmmapper.com",

    "upstream.nmmapper.com",

    "mail.nmmapper.com",

    "goaccess.nmmapper.com",

    "a1.nmmapper.com",

    "nmmapper.com"

]

```

Limiting the query with 

```sh

$ python3 censys_subdomain_finder.py  --d nmmapper.com  -l 2000

```