bing0o/SubEnum

Alive Domain Function Detection

Closed this issue · 7 comments

secfb commented

SubEnum is really well thought out.
It would be nice if httprobe was added to detect live domains. This feature would be great if optional.
-rs=resolve

ALIVE(){
cat $domain-*| httprobe -c 40>httprobe_$domain.txt;cat httprobe_$domain.txt|cut -d "/" -f3|sort -u|tee r_$domain.txt
}

subenum -l domain.txt -u Amass,Subfinder -rs 

that's really a good idea, working on it
thanks @secfb

but i suggest to keep the protocols and don't use cut, to be available for direct use

@secfb the script is updated, please check it out, and give me your feedback.

secfb commented

@bing0o It was really nice. I made some editing in the function.

ALIVE(){
	printf "$bold[+] Resolving $end"
	printf "                        \r"
	cat $1 | httprobe -c $thread > "resolved-$2.txt"
	echo -e $green"[+] Resolved(http/https):  $end$(wc -l resolved-$2.txt)"
	cat resolved-$2.txt|cut -d "/" -f3 | sort -u>rs-domain-$2.txt
	echo -e $red"[+] Resolved Uniq Domain:$end $(wc -l rs-domain-$2.txt)"
}
 bash subenum.sh -d testfire.net -u Findomain,crt -r 

1

that's actually a good idea, and that's what i do after resolving the subs, but i don't want it to make a lot of output files, especially when when u have a long list of targets
thanks for your contribution :)

@all-contributors please add @secfb for code

@bing0o

I've put up a pull request to add @secfb! 🎉