Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/tomnomnom/assetfinder
Find domains and subdomains related to a given domain
https://github.com/tomnomnom/assetfinder
Last synced: 2 days ago
JSON representation
Find domains and subdomains related to a given domain
- Host: GitHub
- URL: https://github.com/tomnomnom/assetfinder
- Owner: tomnomnom
- License: mit
- Created: 2019-06-23T20:26:43.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2024-06-07T17:08:47.000Z (6 months ago)
- Last Synced: 2024-11-25T21:05:36.946Z (16 days ago)
- Language: Go
- Homepage:
- Size: 15.6 KB
- Stars: 3,051
- Watchers: 47
- Forks: 485
- Open Issues: 41
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-bbht - assetfinder - Find domains and subdomains related to a given domain (Subdomain-enum)
- awesome-bbht - assetfinder - Find domains and subdomains related to a given domain (Subdomain-enum)
- awesome-bugbounty-tools - assetfinder - Find domains and subdomains related to a given domain (Recon / Subdomain Enumeration)
- WebHackersWeapons - assetfinder
- awesome-hacking-lists - tomnomnom/assetfinder - Find domains and subdomains related to a given domain (Go)
- StarryDivineSky - tomnomnom/assetfinder
README
# assetfinder
Find domains and subdomains potentially related to a given domain.
## Install
If you have Go installed and configured (i.e. with `$GOPATH/bin` in your `$PATH`):
```
go get -u github.com/tomnomnom/assetfinder
```
Otherwise [download a release for your platform](https://github.com/tomnomnom/assetfinder/releases).
To make it easier to execute you can put the binary in your `$PATH`.
## Usage
```
assetfinder [--subs-only]
```
## Sources
Please feel free to issue pull requests with new sources! :)
### Implemented
* crt.sh
* certspotter
* hackertarget
* threatcrowd
* wayback machine
* dns.bufferover.run
* facebook
* Needs `FB_APP_ID` and `FB_APP_SECRET` environment variables set (https://developers.facebook.com/)
* You need to be careful with your app's rate limits
* virustotal
* Needs `VT_API_KEY` environment variable set (https://developers.virustotal.com/reference)
* findsubdomains
* Needs `SPYSE_API_TOKEN` environment variable set (the free version always gives the first response page, and you also get "25 unlimited requests") — (https://spyse.com/apidocs)
### Sources to be implemented
* http://api.passivetotal.org/api/docs/
* https://community.riskiq.com/ (?)
* https://riddler.io/
* http://www.dnsdb.org/
* https://certdb.com/api-documentation
## TODO
* Flags to control which sources are used
* Likely to be all on by default and a flag to disable
* Read domains from stdin