Skip to content
This repository contains all the supplement material for the book "The art of sub-domain enumeration"
Branch: master
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Pipfile
Pipfile.lock
README.md
censys_subdomain_enum.py Update censys_subdomain_enum.py Jan 24, 2019
cheatsheet.pdf Updated the scripts Jan 2, 2018
cloudflare_subdomain_enum.py Made the python files executable Oct 9, 2018
crtsh_enum_psql.py Made the python files executable Oct 9, 2018
crtsh_enum_psql.sh Made the python files executable Oct 9, 2018
crtsh_enum_web.py
requirements.txt
san_subdomain_enum.py
virustotal_subdomain_enum.py

README.md

The art of subdomain enumeration

  1. censys_subdomain_enum.py - Extract subdomains for a given domain using Censys.io API
  2. cheatsheet.pdf - cheat sheet for the subdomain enumeration techniques
  3. cloudflare_subdomain_enum.py - A script to do DNS enumeration using Cloudflare service
  4. crtsh_enum_psql.py - Extract subdomains for a given domain using crt.sh postgres interface(Python)
  5. crtsh_enum_psql.sh - Extract subdomains for a given domain using crt.sh postgres interface(shell script)
  6. crtsh_enum_web.py - Extract subdomains for a given domain using crt.sh by scraping the web page(Python3)
  7. san_subdomain_enum.py - Extract domains/subdomains listed in Subject Alternate Name(SAN) of SSL/TLS cert for a domain
  8. virustotal_subdomain_enum.py - Extract subdomains for a given domain using VirusTotal API

Feedback/Suggestions

@0xbharath

You can’t perform that action at this time.