sigsubs is a subdomain discovery tool - it gathers a list of subdomains passively using various online sources.
To display help message for sigsubs use the -h
flag:
$ sigsubs -h
_ _
___(_) __ _ ___ _ _| |__ ___
/ __| |/ _` / __| | | | '_ \/ __|
\__ \ | (_| \__ \ |_| | |_) \__ \
|___/_|\__, |___/\__,_|_.__/|___/ V1.3.0
|___/
USAGE:
sigsubs [OPTIONS]
OPTIONS:
-d domain to find subdomains for
-sE comma separated list of sources to exclude
-sL list all the sources available
-nC no color mode
-silent silent mode: output subdomains only
-sU comma separated list of sources to use
DESCLAIMER: wayback and github sources are a bit slow.
You can download the pre-built binary for your platform from this repository's releases page, extract, then move it to your $PATH
and you're ready to go.
sigsubs requires go1.14+ to install successfully. Run the following command to get the repo
$ GO111MODULE=on go get -u -v github.com/drsigned/sigsubs/cmd/sigsubs
▶ git clone https://github.com/drsigned/sigsubs.git
▶ cd sigsubs/cmd/sigsubs/
▶ go build .
▶ mv sigsubs /usr/local/bin/
▶ sigsubs -h
sigsubs will work after installation. However, to configure sigsubs to work with certain services you will need to have setup API keys. Currently these services include:
- chaos
- github
The API keys are stored in the $HOME/.config/sigsubs/conf.yaml
file - created upon first run - and uses the YAML format. Multiple API keys can be specified for each of these services.
Example:
version: 1.3.0
sources:
- alienvault
- anubis
- bufferover
- cebaidu
- certspotterv0
- chaos
- crtsh
- github
- hackertarget
- rapiddns
- riddler
- sonar
- sublist3r
- threatcrowd
- threatminer
- urlscan
- wayback
- ximcx
keys:
chaos:
- d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39asdsd54bbc1aabb208c9acfb
github:
- d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39
- asdsd54bbc1aabb208c9acfbd2dd41ce7fc9db39
Issues and Pull Requests are welcome!