aasicq/SubEnum

bash script for Subdomain Enumeration

Description:

bash script for Subdomain Enumeration using 4 tools and 3 APIs, you have to install these tools by yourself to be able to use SubEnum.sh

Available Tools and APIs:

1. Tools:
   • Findomain
   • SubFinder
   • Amass
   • AssetFinder
   • Httprobe, To Probe For Working HTTP and HTTPS Subdomains.
2. APIs:
   • WayBackMachine
   • crt.sh
   • BufferOver

Usage:

Basic usage:

$ subenum -d target.com 

Resolve The Found Subdomains:

$ subenum -d target.com -r 

Agains a list of domains

$ subenum -l domains.txt -r

Exclude:

$ subenum -d target.com -e Amass,wayback

Use:

$ subenum -d target.com -u Findomain,Subfinder

exclude and use can be used with list of domains too

$ subenum -l domains.txt -u crt,bufferover

happy hacking!

thanks goes to:

@secfb: for the idea of adding the option -r/--resolve to resolve the found subdomains, issue.