nycto-hackerone / subdomainator

Stay on top of new domains! Bug bounty hunters can use this tool to receive Pushbullet notifications each time there is a new target subdomain.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

subdomainator

Stay on top of new subdomains! Bug bounty hunters can use this tool to receive Pushbullet notifications each time there is a new target subdomain.

Installation

git clone https://github.com/skorov/subdomainator.git
cd subdomainator
pip install -r requirements.txt
python subdomainator_cli.py

Sign up with Pushbullet and get your API key. pushbullet

Add the Pushbullet key in subdomainator. add pushkey

Edit config.py file.
config

That's the bare minimum! You're ready to add domains.

Usage

Enable some modules to search for subdomains for us. enable mod

Add a domain to monitor. add domain

Note: You won't get notification the first run.

That's it! Sit back and wait for the subdomains to roll in to your browser, phone or wherever you have Pushbullet.

Modules

The following modules currently come with subdomainator. I plan to add more later. :-)

sublist3r

Such an awesome tool, that I just had to hook into it. This modules runs the non-bruteforce parts of the tool. You will need to get sublist3r working yourself before you can use this module.

Virus Total

Contains decent subdomain data.

Custom Modules

No module for what you need? No worries! You can write your own. Subdomainator was written with this specifically in mind. The modules/sdmodulebase.py contains almost all the code you need for your module, so no need to rewrite everything. You simply have to create a new module that inherrits from sdmodulebase.ModuleBase.

Use modules/example.py as a template for your custom module. You will have to override the getSubdomains(self, domain) method and maybe the run(self) method. Check out the example for more info.

Module files are run as cron jobs so make sure they can be run as standalone.

History

23/07/2016:

  • Release

Credits

  • Credit for inspiration goes to Shubs (@infosec_au) and his tool, Assetnote
  • Thanks to aboul3la for making sublist3r for which subdomainator has a module. This made my life much easier!

Get in touch

Does my tool suck? Let me know what you think! Twitter: @skorov8

About

Stay on top of new domains! Bug bounty hunters can use this tool to receive Pushbullet notifications each time there is a new target subdomain.


Languages

Language:Python 100.0%