SubDomz

All-in-One (Passive) Subdomain Enumeration Tool

---

What is SubDomz?

SubDomz is an automation tool for finding the subdomains of the given target or targets passively. It uses multiple tools and various online search engines and services in parallel to find subdomains effectively and sort and save them in an organized way.

Installation

git clone https://github.com/0xlittleboy/SubDomz.git
cd SubDomz 
chmod +x install.sh SubDomz.sh
dos2unix install.sh SubDomz.sh config.txt
./install.sh

Usage

# Options:
      -d, --domain            - Domain to enumerate
      -l, --list              - List of root domains to enumerate
      -u, --use               - Specify which tools to be used (Ex: subfinder, amass, crt,...)
      -e, --exclude           - Specify which tools to be excluded (Ex: findomain, wayback, gau,...)
      -o, --output            - Output file to save final results ( Default: <target>-Date-Time.txt)
      -s, --silent            - Show only subdomains in output
      -hp, --http-probe       - probe for working http/https servers
      -k, --keep              - keep the temporary files ( output from each tool)
      -p, --parallel          - Run parallelly for faster results. Doesn't Work With -e/--exclude or -u/--use.
      -h, --help              - Display this help message and exit
      -v, --version           - Display the version and exit
      -ls, --list-sources     - Display all available sources/tools

Available Sources/tools

• Subfinder
• Amass
• Assetfinder
• Chaos
• Findomain
• Haktrails
• Gau
• Github-subdomains
• Gitlab-subdomains
• Cero
• Shosubgo
• Censys
• Crtsh
• JLDC-anubis
• Alienvault
• Subdomain-center
• Certspotter

API keys

• Add your API keys in config.txt

Credit

This tool was inspired by @bing0o domains.sh script.

Star History