all_tlds agent is a subdomain discovery tool that discovers valid subdomains for websites.
The all_tlds Agent works collectively with other agents. Its job; from a domain name, discover all subdomains in a fast and efficient way, and pass its findings to other agents responsible for scanning the subdomains, for example, the Nuclei agent
To perform your first scan, simply run the following command:
oxo scan run --install --agent agent/ostorlab/all_tlds --agent agent/ostorlab/nuclei domain-name your-domain.com
This command will download and install agents agent/ostorlab/all_tlds
& agent/ostorlab/nuclei
and target the domain your-domain
.
Nuclei Agent will scan for , and waits for all subdomains found by the all_tlds Agent to perform other scans.
You can use any Agent expecting <v3.asset.domain_name> as an in-selector, like Nmap, OpenVas, etc.
For more information, please refer to the OXO Documentation
Agent all_tlds can be installed directly from the oxo agent store or built from this repository.
oxo agent install agent/ostorlab/all_tlds
- To build the all_tlds agent you need to have oxo installed in your machine. If you have already installed oxo, you can skip this step.
pip3 install ostorlab
- Clone this repository.
git clone https://github.com/Ostorlab/agent_all_tlds.git && cd agent_all_tlds
- Build the agent image using oxo cli.
oxo agent build --file=ostorlab.yaml
You can pass the optional flag --organization
to specify your organisation. The organization is empty by default.
- Run the agent using on of the following commands:
- If you did not specify an organization when building the image:
oxo scan run --agent agent//all_tlds --agent agent//nuclei domain-name your-domain.com
- If you specified an organization when building the image:
oxo scan run --agent agent/[ORGANIZATION]/all_tlds --agent agent/[ORGANIZATION]/nuclei domain-name your-domain.com