https://github.com/threezh1/subdomainfinder
SubdomainFinder is a tool for collecting subdomains. It increases the range of information gathering during the penetration test.
https://github.com/threezh1/subdomainfinder
collect collection domain domain-api information sub-domain subdomain threezh1
Last synced: about 1 year ago
JSON representation
SubdomainFinder is a tool for collecting subdomains. It increases the range of information gathering during the penetration test.
- Host: GitHub
- URL: https://github.com/threezh1/subdomainfinder
- Owner: Threezh1
- Created: 2019-07-29T09:25:10.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2019-07-30T05:40:38.000Z (almost 7 years ago)
- Last Synced: 2025-04-13T13:03:57.835Z (about 1 year ago)
- Topics: collect, collection, domain, domain-api, information, sub-domain, subdomain, threezh1
- Language: Python
- Size: 23.4 KB
- Stars: 25
- Watchers: 1
- Forks: 6
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# SubdomainFinder
SubdomainFinder is a tool for collecting subdomains. It increases the range of information gathering during the penetration test.
The reason for writing this tool is that my computer can't use Sublist3r, I don't want to spend time configuring the environment for it.
Also, since I don't know enough about multithreading now, I didn't add the part of the brute subdomain, I believe I will add it in later versions.
When collecting the netcraft part, refer to [Sublist3r](https://github.com/aboul3la/Sublist3r). The rest is written by myself.
## Introduction
Auth: Threezh1
Blog: http://www.threezh1.com/
- Python Version: 3.7
- Dependencies: `pip3 install -r requirements.txt`
- Channels for collecting subdomains：
`crt, dnsdumpster, threatcrowd, virustotal, natcraft, google transparencyreport, ask, baidu, bing, so, google`
- Have to be aware of is:
- Please make sure the network can access websites such as google
- A single part may report an error, but does not affect the overall use.
- If an error occurs, please wait a while and try again
- Problems at the current stage：
- When the number of subdomains is very large, the program may have to wait for a long time and get stuck with a small probability.
- Some channels will be invalid due to network factors
- The speed of collection is not particularly fast
PS：In the windows, it is recommended to run with cmder.
## API
- https://www.virustotal.com/
## Usage
`usage: SubdomainFinder.py [-h] -d DOMAIN [-o] [-html]`
| Short Form | Long Form | Description |
| :-- | :-- | :-- |
| -h | --help | show this help message and exit |
| -d | --domain | Domain name to enumerate subdomains of |
| -o | --output | Output file name ,the domain name is thefile_name.txt |
| -html | --html | Output html, the domain name is the file_name.html |
### Example
- Simple：
`python3 SubdomainFinder.py -d mi.com`
- Output to txt:
The output is a txt file, the default name is mi_com.txt
`python3 SubdomainFinder.py -d mi.com -o`
- Output to html:
`python3 SubdomainFinder.py -d mi.com -html`
Get more information about the subdomain, including the page title, ip address, website status, and output it as an html file. The default name is mi_com.html
