t0thkr1s/subzero

Passive subdomain enumeration tool for bug-bounty hunters & penetration testers.

subzero

subzero is a standalone passive subdomain enumeration tool that uses various sources to gather data.

Download

git clone https://github.com/t0thkr1s/subzero

Install

The script has only one dependency:

• rich

You can install it by typing:

python3 setup.py install

Run

python3 subzero.py [domain]

To save the results into a file, you can run it like this:

python3 subzero.py [domain] -o [file] 

Screenshot

APIs Used

• Certspotter
• Shodan
• Omnisint
• Hacker Target
• DNS Bufferover
• TLS Bufferover
• Sublist3r
• VirusTotal
• ThreatCrowd
• SecurityTrails
• ThreatMiner
• AlienVault
• UrlScan
• Crt.sh
• Anubis
• DnsDB
• Recon.dev
• PassiveTotal
• Censys
• Riddler
• Facebook
• Binaryedge
• WhoisXMLAPI
• Spyse

Disclaimer

This tool is only for testing and academic purposes and can only be used where strict consent has been given. Do not use it for illegal purposes! It is the end user’s responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this tool and software.

License

This project is licensed under the GPLv3 License - see the LICENSE file for details