SIF (stray IP finder) produces a list of target's IPs that don't have a subdomain hosted on them. 📍
* shodan
* alienvault
* hackertarget
* threatcrowd
* securitytrails
* omnisint
git clone https://github.com/Pyr0sec/SIF
cd SIF
chmod +x setup.sh sif.sh
./setup.sh
Note: Shodan Premium is required to run this script. To setup shodan-cli visit this link: https://cli.shodan.io/
./sif.sh
or
sudo ./sif.sh
cp <PATH TO FILE>/sif.sh /usr/bin/sif
sif
[Mostly work in Linux Systems]
- Resolve all subdomains to IP addresses. Save IPs to list1.txt
- Go to http://shodan.io and search Ssl.cert.subject.CN:"domain.com"
- Save the IPs you get from http://shodan.io in list2.txt
- Remove all the list1.txt IPs from list2.txt
- Probe all IPs from list2.txt.
- That's it. You now have a list of target's IPs that don't have a subdomain hosted on them.
Made with ❤ by me.