https://github.com/w0ltage/subchase
Chase subdomains by parsing the results of Google and Yandex search results
https://github.com/w0ltage/subchase
enumeration scraping-websites search-engine subdomain-enumeration
Last synced: 5 months ago
JSON representation
Chase subdomains by parsing the results of Google and Yandex search results
- Host: GitHub
- URL: https://github.com/w0ltage/subchase
- Owner: w0ltage
- License: mit
- Created: 2023-06-22T12:15:14.000Z (almost 2 years ago)
- Default Branch: master
- Last Pushed: 2023-09-29T14:07:59.000Z (over 1 year ago)
- Last Synced: 2024-08-03T21:02:02.868Z (9 months ago)
- Topics: enumeration, scraping-websites, search-engine, subdomain-enumeration
- Language: Go
- Homepage:
- Size: 517 KB
- Stars: 15
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- Offensive-OSINT-Tools - subchase - Chase subdomains by parsing the results of Google and Yandex search results ([↑](#-table-of-contents) SubDomain's / Tools)
README
Notes •
Installation •
Usage •
Running subchase •
To-Do functionality
`subchase` is a subdomain discovery tool that returns (almost always) valid subdomains for websites by analyzing search results from Google and Yandex search engines. The goal of `subchase` is not to find all subdomains, but to find a few subdomains that were not found by other tools.
# Notes
- There are false positives in the results. Methods to filter results have not yet been implemented.
- The results may vary from run to run.
- This is usually due to captchas that cannot be bypassed, and the frequency of which cannot be predicted.
# Installation
Install `go v1.20`, then add `$HOME/go/bin` to PATH and run the following command to get the repo
```sh
go install -v github.com/tokiakasu/subchase/cmd/subchase@latest
```
# Usage
```sh
$ subchase -h
Usage of subchase:
-d string
Specify the domain whose subdomains to look for (ex: -d google.com)
-json
Ouput as JSON
-silent
Remove startup banner
```
# Running subchase
To run the tool on a target, just use the following command.
```console
$ subchase -d google.com
__ __
_______ __/ /_ _____/ /_ ____ _________
/ ___/ / / / __ \/ ___/ __ \/ __ `/ ___/ _ \
(__ ) /_/ / /_/ / /__/ / / / /_/ (__ ) __/
/____/\__,_/_.___/\___/_/ /_/\__,_/____/\___/ v0.1.0
earthengine.google.com
meet.google.com
classroom.google.com
passwords.google.com
cloud.google.com
jibe.google.com
books.google.com
messages.google.com
adsense.google.com
sites.google.com
images.google.com
support.google.com
careers.google.com
ads.google.com
store.google.com
checks.google.com
asia.google.com
firebase.google.com
accounts.google.com
mydevices.google.com
myactivity.google.com
mymaps.google.com
atap.google.com
forms.google.com
admin.sites.google.com
about.artsandculture.google.com
ipv4.google.com
ipv6.google.com
assistant.google.com
fonts.google.com
```
## Chase subdomains by top-level domain (TLD)
Specify only a TLD instead of a subdomain
# To-Do functionality
- [x] Add option to output results in JSON
- [ ] Add option to output content-length along with domains