0xPugazh / SubDomz

All in One Subdomain Enumeration Tool

SubDomz

All in One (Passive) Subdomain Enumeration Tool

---

What is SubDomz ?

SubDomz is an automation tool for finding the subdomains passively of the given target or targets. It uses multiple tools and various online search engines and services in parallel to find subdomains effectively and sort and save them in an organised way.

Installation

git clone https://github.com/0xlittleboy/SubDomz.git
cd SubDomz 
chmod +x install.sh SubDomz.sh
./install.sh

Usage

# Options:
      -d, --domain            - Domain to enumerate
      -l, --list              - List of root domains to enumerate
      -u, --use               - Specify which tools to be used (Ex: subfinder, amass, crt,...)
      -e, --exclude           - Specify which tools to be excluded (Ex: findomain, wayback, gau,...)
      -o, --output            - Output file to save final results ( Default: <target>-Date-Time.txt)
      -s, --silent            - Show only subdomains in output
      -hp, --http-probe       - probe for working http/https servers
      -k, --keep              - keep the temporary files ( output from each tools)
      -p, --parallel          - Run parallely for faster results. Doesn't Work With -e/--exclude or -u/--use.
      -h, --help              - Display this help message and exit
      -v, --version           - Display the version and exit
      -ls, --list-sources     - Display all available sources/tools

Available Sources/tools

• Subfinder
• Amass
• Assetfinder
• Chaos
• Findomain
• Haktrails
• Gau
• Github-subdomains
• Gitlab-subdomains
• Cero
• Shosubgo
• Censys
• Crtsh
• JLDC-anubis
• Alienvault
• Subdomain-center
• Certspotter

API keys

• Add your API keys in config.txt

Get 200$ credits on DO

Support Me

Credit

This tool was inspired by @bing0o domains.sh script.

Star History