Skip to content

SubSeeker is a subdomain discovery tool that uses public SSL certificate logs from sources like crt.sh to find and resolve subdomains for a given domain. It identifies active subdomains by resolving their IP addresses and can output the results as text, URLs, or IP lists for masscan.

Notifications You must be signed in to change notification settings

omersayak/SubSeeker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 

Repository files navigation

SubSeeker: Subdomain Discovery Tool

SubSeeker is a Python tool designed for discovering subdomains of a target domain and resolving their IP addresses. By leveraging public SSL certificate logs, such as crt.sh, it gathers all possible subdomains for a domain and identifies which ones are active.

Features:

1- Extracts subdomain information from SSL certificates.

2- Resolves IP addresses of subdomains.

3- Lists active subdomains along with their corresponding IP addresses.

4- Outputs results as a list of URLs or a list of IPs compatible with masscan.

How to Use:

  1. Clone the Repository:

    https://github.com/omersayak/SubSeeker.git
    
  2. Navigate to the Directory:

     cd SubSeeker
    
  3. Install Dependencies:

     pip install -r requirements.txt
    
  4. Run the Scripts:

     python SubSeeker.py -d <target_domain> [options]
    

Options:

-u, --urls: Outputs the resolved subdomains as URLs starting with https://.
-m, --masscan: Lists resolved IP addresses, one per line, suitable for input into Masscan with the -iL option.
-o, --output: Specifies the file path to write the results to. If not provided, outputs will be printed to standard output (the screen).

Example Usage:

  1. To perform subdomain discovery for a domain and write the results to a file:

    python SubSeeker.py -d example.com -o output.txt
    
  2. To get a list of URLs for active subdomains:

    python SubSeeker.py -d example.com -u
    
  3. To create a list of IP addresses compatible with Masscan:

    python SubSeeker.py -d example.com -m -o ip_list.txt
    

Notes:

  1. <target_domain>: The domain name you want to perform discovery on (e.g., example.com).

  2. [options]: Optional arguments for different output formats and additional options. For details, use the -h option to access the help menu.

About

SubSeeker is a subdomain discovery tool that uses public SSL certificate logs from sources like crt.sh to find and resolve subdomains for a given domain. It identifies active subdomains by resolving their IP addresses and can output the results as text, URLs, or IP lists for masscan.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages