Discover internal subdomains using dash (-), dot (.) expressions.

Requirements

HTTPX:

Thanks to ProjectDiscovery for such a great tool. You can download httpx from here.

PostAdd

./subdot <<< "sub-exp domains.txt exp.txt out.txt"
./subdot <<< "sub.exp domains.txt exp.txt out.txt"

sub-test.example.com
sub-ext.example.com
...
sub.test.example.com
sub.ext.example.com

PreAdd

./subdot <<< "exp-sub domains.txt exp.txt out.txt"
./subdot <<< "exp.sub domains.txt exp.txt out.txt"

test-sub.example.com
ext-sub.example.com
...
test.sub.example.com
ext.sub.example.com	

Usage

git clone https://github.com/pocdork/subdot.git
cd subdot
chmod +x subdot

Use all argument for perform all operation.

./subdot <<< "[sub-exp/sub.exp/exp-sub/exp.sub/all] domains.txt exp.txt out.txt"

The result then will be passed to httpx and you'll get final result like this:

https://sub-test.example.com [200]
https://sub-ext.example.com [503]
https://example-ext.com [404]
...
https://sub.test.example.com [301]
https://sub.ext.example.com [401]
https://exampletest.com [200]

ToDo

• Perform multi level subdomain discovery

Follow Me