mathis2001 / SubPwnable

Are your (sub)domains pwnable ? SubPwnable is a simple Python tool designed to helps you answer this question.

SubPwnable

Are your (sub)domains pwnable? SubPwnable is a simple Python tool designed to help you answer this question by finding your inactive subdomains and looking up their CNAME records. Then you will need to check if the service used in your CNAME record is vulnerable in the known services list.

Install:

$ git clone https://github.com/mathis2001/SubPwnable

$ cd SubPwnable

$ python3 subpwnable.py

Requirements:

• Python3

• Pip3

• dns.resolver

• requests

• cssselect

• lxml.html

• PrettyTable

Usage:

usage: ./subpwnable.py [-h] [-d domain] [-l domains list]

options:

optional arguments:
  -h, --help            show this help message and exit
  -d DOMAIN, --domain DOMAIN   Target a single domain
  -l DOMAIN LIST, --list DOMAIN LIST   Target a list of domains

Screens: