A easy-to-use python tool to perform dns recon with multiple options

If you want to know more about the tool you can read my own post in my blog

Installation:

It can be installed in any system with python3

You can easily install SDomDiscover using pip:

pip3 install sdomdiscover

If you want to install it from source:

git clone https://github.com/D3Ext/SDomDiscover
cd SDomDiscover
pip3 install -r requirements.txt

One-liner

git clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.py

Usage:

Common usages

If installed with pip3:

sdomdiscover

To see the help panel and other parameters

python3 SDomDiscover.py -h

Main usage of the tool to dump the valid domains in the SSL certificate

python3 SDomDiscover.py -d example.com

Used to perform all the queries and recognizement

python3 SDomDiscover.py -d domain.com --all

Features:

☑️ Dump valid subdomains

☑️ Store subdomains in a file

☑️ A lot of extra queries to enumerate the DNS port

☑️ WAF detection and enumerate type

☑️ Subdomain Takeover checker

☑️ Email discovery with Proxycrawl support with API TOKEN

Demo:

Simple query to find valid subdomains

If you consider this project has been useful, I would really appreciate supporting me by giving this repo a star or buying me a coffee.

Copyright © 2022, D3Ext