Stay on top of new subdomains! Bug bounty hunters can use this tool to receive Pushbullet notifications each time there is a new target subdomain.
git clone https://github.com/skorov/subdomainator.git
cd subdomainator
pip install -r requirements.txt
python subdomainator_cli.py
Sign up with Pushbullet and get your API key.
Add the Pushbullet key in subdomainator.
That's the bare minimum! You're ready to add domains.
Enable some modules to search for subdomains for us.
Note: You won't get notification the first run.
That's it! Sit back and wait for the subdomains to roll in to your browser, phone or wherever you have Pushbullet.
The following modules currently come with subdomainator. I plan to add more later. :-)
Such an awesome tool, that I just had to hook into it. This modules runs the non-bruteforce parts of the tool. You will need to get sublist3r working yourself before you can use this module.
Contains decent subdomain data.
No module for what you need? No worries! You can write your own. Subdomainator was written with this specifically in mind. The modules/sdmodulebase.py
contains almost all the code you need for your module, so no need to rewrite everything. You simply have to create a new module that inherrits from sdmodulebase.ModuleBase
.
Use modules/example.py
as a template for your custom module. You will have to override the getSubdomains(self, domain)
method and maybe the run(self)
method. Check out the example for more info.
Module files are run as cron jobs so make sure they can be run as standalone.
23/07/2016:
- Release
- Credit for inspiration goes to Shubs (@infosec_au) and his tool, Assetnote
- Thanks to aboul3la for making sublist3r for which subdomainator has a module. This made my life much easier!
Does my tool suck? Let me know what you think! Twitter: @skorov8