modulexcite/frogy

My subdomain enumeration script. It's unique in the way it is built upon.

Using the combination of different subdomain enumeration tools and logic this script tries to identify more subdomains and root domains in recon.

Logic

• Requirements: Go Language, Python 3.+, jq
  

• Tools used - You must need to install these tools and place them into /usr/bin folder to use this script
  

  • SubFinder
  • Find-domain (Ensure the binary name is findomain-linux in the /usr/bin folder)
  • httpx
  • anew

  You might require to install WHOIS and JQ depending upon your enviroment. You can install them using the following commands:

   apt install jq
   apt install whois

• Installation

  git clone https://github.com/iamthefrogy/frogy.git
  cd frogy
  chmod +x frogy.sh
  git clone https://github.com/aboul3la/Sublist3r.git
  git clone https://github.com/rbsec/dnscan.git

• Usage

  ./frogy.sh

• Output

  Output will be saved within output/ORG/ORG.master file. 
  If telsa.com is your target then output file Of all the subdomains will be output/telsa/tesla.master and all the root domains will be recorded in the output/tesla/rootdomains.txtls file.
  

TODO

• ✅ Efficient folder structure management
• Resolving subdomains using Massdns
• ✅ Add dnscan for extened subdomain enum scope
• ✅ Eliminate false positives. Currently around 2% to 4% false positives are there.
• ✅ Bug Fixed, for false positive reporting of domains and subdomains.
• ✅ Searching domains through crt.sh via registered organization name from WHOIS instead of domain name created some garbage data. Filtered result to only grab domains and nothing else.
• ✅ Now finds live websites on all standard/non-standard ports.
• ✅ Now finds all websites with login portals. It also checks websites home page that redirects to login page automatically upon opening.
• Find live subdomains and domains only independent to whether a website was found or not.

Thanks to the authors of the tools used in this script.

Initial repo created - A few weeks back below date.
Date - 4 March 2019, Open-sourced
Date - 19 March 2021, Major changes

Warning/Disclaimer: Read the detailed disclaimer at my blog - https://github.com/iamthefrogy/Disclaimer-Warning/blob/main/README.md
Logo credit - www.designevo.com