Skip to content

dhn/udon

main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

udon


  88   88 8888b.   dP"Yb  88b 88 
  88   88  8I  Yb dP   Yb 88Yb88 
  Y8   8P  8I  dY Yb   dP 88 Y88 
   YbodP' 8888Y"   YbodP  88  Y8                                                   


                     made with <3

udon: A simple tool that helps to find domains based on the Google Analytics ID.

Building

go install github.com/dhn/udon@latest

Usage

Usage of udon:
  -json
        Print results as JSON
  -s string
        UA ID to find domains for
  -silent
        Show only domains in output
  -version
        Show version of udon

Running udon

udon can be used to find domains/subdomains for a given Google Analytics ID. In this example for "UA-33427076":

➜  $ udon -silent -json -s UA-33427076 | jq -c
{"domain":"soester-anzeiger.de","source":"site-overview"}
{"domain":"wa.de","source":"site-overview"}
{"domain":"suederlaender-tageblatt.de","source":"site-overview"}
{"domain":"trauer.nrw","source":"site-overview"}
{"domain":"come-on.de","source":"site-overview"}
{"domain":"immobilien.wa.de","source":"spyonweb"}
{"domain":"nrw-jobs.de","source":"spyonweb"}
{"domain":"auto.wa.de","source":"hackertarget"}
{"domain":"come-on.de","source":"hackertarget"}
{"domain":"immobilien.wa.de","source":"hackertarget"}
{"domain":"soester-anzeiger.de","source":"hackertarget"}
{"domain":"trauer.nrw","source":"hackertarget"}
{"domain":"wa-mediengruppe.de","source":"hackertarget"}
{"domain":"wa.de","source":"hackertarget"}
{"domain":"web.archive.org","source":"hackertarget"}
{"domain":"www.come-on.de","source":"hackertarget"}
{"domain":"www.soester-anzeiger.de","source":"hackertarget"}
{"domain":"www.wa.de","source":"hackertarget"}
{"domain":"wa.de","source":"osint.sh"}
{"domain":"soester-anzeiger.de","source":"osint.sh"}
{"domain":"come-on.de","source":"osint.sh"}
{"domain":"dispspotegcred.tk","source":"osint.sh"}
{"domain":"conmamanan.tk","source":"osint.sh"}

To find UA id's following simple nuclei [1] template can be used:

id: google-analytics-id

info:
  name: Google Analytics ID Discovery
  author: dhn
  severity: info
  tags: tech

requests:
  - method: GET

    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        name: ua-id
        part: body
        regex:
          - "UA-[0-9]+(-[0-9]+)"

    redirects: true
    max-redirects: 5
    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "UA-[0-9]+(-[0-9]+)"

      - type: status
        status:
          - 200

Disclaimer

udon leverages multiple open APIs, it is developed for individuals to help them for research or internal work. If you wish to incorporate this tool into a commercial offering or purposes, you must agree to the Terms of the leveraged services:


You expressly understand and agree that udon (creators and contributors) shall not be liable for any damages or losses resulting from your use of this tool or third-party products that use it.

Creators aren't in charge of any and have/has no responsibility for any kind of:

  • Unlawful or illegal use of the tool.
  • Legal or Law infringement (acted in any country, state, municipality, place) by third parties and users.
  • Act against ethical and / or human moral, ethic, and peoples and cultures of the world.
  • Malicious act, capable of causing damage to third parties, promoted or distributed by third parties or the user through this tool.

This disclaimer was shameless stolen from: https://github.com/projectdiscovery/subfinder/blob/master/DISCLAIMER.md

Reference

About

A simple tool that helps to find assets/domains based on the Google Analytics ID.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published