SubDomz is an automation tool for finding the subdomains of the given target or targets passively. It uses multiple tools and various online search engines and services in parallel to find subdomains effectively and sort and save them in an organized way.
git clone https://github.com/0xPugal/Subdomz.git
cd SubDomz
chmod +x install.sh subdomz.sh check.sh
./install.sh
# Options:
-d, --domain - Domain to enumerate
-l, --list - List of root domains to enumerate
-u, --use - Specify which tools to be used (Ex: subfinder, amass, crt,...)
-e, --exclude - Specify which tools to be excluded (Ex: findomain, wayback, gau,...)
-o, --output - Output file to save final results ( Default: <target>-Date-Time.txt)
-s, --silent - Show only subdomains in output
-hp, --http-probe - probe for working http/https servers
-k, --keep - keep the temporary files ( output from each tool)
-p, --parallel - Run parallely for faster results. Doesn't Work With -e/--exclude or -u/--use.
-h, --help - Display this help message and exit
-v, --version - Display the version and exit
-ls, --list-sources - Display all available sources/tools
- Subfinder
- Amass
- Assetfinder
- Chaos
- Findomain
- Haktrails
- Gau
- Github-subdomains
- Gitlab-subdomains
- Cero
- Shosubgo
- Censys
- Crtsh
- JLDC-anubis
- Alienvault
- Subdomain-center
- Certspotter
- Puredns
- Trickest Resolvers
- Best-DNS-wordlists
- Add your API keys in config.txt
This tool was inspired by @bing0o domains.sh script.