daehee / mildew

Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs

mildew

Seed your DoD VDP recon with the latest list of official "dotmil" domains. mildew crawls all the DoD-maintained website directories to scrape unique .mil domains. Then it extracts certificate transparency logs for each discovered root domain for deeper public domain discovery.

Based on the work of dotmil-domains a research project by esonderegger mapping out the DoD's public-facing domain listings:

There currently isn't a publicly available directory of all the domain names registered under the US military's .mil top-level domain. Such a directory would be useful for people looking to get an aggregate view of military websites and how they are hosted.

Install

go get -u github.com/daehee/mildew/cmd/mildew

Usage

mildew

Data Sources

The official DoD website directories:

• U.S. Department of Defense
• Air Force
• Army
• Navy

Certificate transparency logs:

• Crt.sh

Report Vulnerabilities

Read the DoD Vulnerability Disclosure Policy and submit a vulnerability report at HackerOne.