All Projects → eslam3kl → crtfinder

eslam3kl / crtfinder

Licence: other
Fast tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com with standard and advanced search techniques

Programming Languages

python
139335 projects - #7 most used programming language

Projects that are alternatives of or similar to crtfinder

Resources
A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.
Stars: ✭ 62 (-35.42%)
Mutual labels:  penetration-testing, bugbounty
Minesweeper
A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
Stars: ✭ 162 (+68.75%)
Mutual labels:  penetration-testing, bugbounty
Pentest Guide
Penetration tests guide based on OWASP including test cases, resources and examples.
Stars: ✭ 1,316 (+1270.83%)
Mutual labels:  penetration-testing, bugbounty
Vhostscan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Stars: ✭ 767 (+698.96%)
Mutual labels:  penetration-testing, bugbounty
Knary
A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
Stars: ✭ 187 (+94.79%)
Mutual labels:  penetration-testing, bugbounty
Ezxss
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
Stars: ✭ 1,022 (+964.58%)
Mutual labels:  penetration-testing, bugbounty
Quiver
Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.
Stars: ✭ 140 (+45.83%)
Mutual labels:  penetration-testing, bugbounty
Hosthunter
HostHunter a recon tool for discovering hostnames using OSINT techniques.
Stars: ✭ 427 (+344.79%)
Mutual labels:  penetration-testing, bugbounty
Garud
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
Stars: ✭ 183 (+90.63%)
Mutual labels:  penetration-testing, bugbounty
Crithit
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
Stars: ✭ 182 (+89.58%)
Mutual labels:  penetration-testing, bugbounty
Interlace
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
Stars: ✭ 760 (+691.67%)
Mutual labels:  penetration-testing, bugbounty
Awesome Bbht
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
Stars: ✭ 190 (+97.92%)
Mutual labels:  penetration-testing, bugbounty
Dirsearch
Web path scanner
Stars: ✭ 7,246 (+7447.92%)
Mutual labels:  penetration-testing, bugbounty
Awsbucketdump
Security Tool to Look For Interesting Files in S3 Buckets
Stars: ✭ 1,021 (+963.54%)
Mutual labels:  penetration-testing, bugbounty
Payloadsallthethings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stars: ✭ 32,909 (+34180.21%)
Mutual labels:  penetration-testing, bugbounty
Nosqlmap
Automated NoSQL database enumeration and web application exploitation tool.
Stars: ✭ 1,928 (+1908.33%)
Mutual labels:  penetration-testing, bugbounty
Osmedeus
Fully automated offensive security framework for reconnaissance and vulnerability scanning
Stars: ✭ 3,391 (+3432.29%)
Mutual labels:  penetration-testing, bugbounty
Sonarsearch
A MongoDB importer and API for Project Sonars DNS datasets
Stars: ✭ 297 (+209.38%)
Mutual labels:  penetration-testing, bugbounty
Awesome Vulnerable Apps
Awesome Vulnerable Applications
Stars: ✭ 180 (+87.5%)
Mutual labels:  penetration-testing, bugbounty
3klcon
Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.
Stars: ✭ 189 (+96.88%)
Mutual labels:  penetration-testing, bugbounty

CrtFinder v1.0

Simple script tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com

Welcome

End


Updades:

Version 1.1, what's new?

  1. Upgrade to python3
  2. Add dig.py script to make advanced enumeration.
# Default mode: it will return the default output ~ 4K subdomain
python3 crtfinder.py -u dell.com | tee -a subdomains.txt 
# Advanced mode: it will return ~ 14k subdomain
python3 dig.py subdomains.txt  

Installation

pip install -r requirments.txt


Usage

python crtfinder.py -u domain.com


Stay in touch <3

LinkedIn | Blog | Twitter

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].