├── LICENSE ├── README.md ├── lists ├── resolvers.txt └── words.txt └── subzzZ /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2020 me_dheeraj 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | [![License](https://img.shields.io/badge/license-MIT-_red.svg)](https://opensource.org/licenses/MIT) 2 | 3 | 4 | 5 | Last updated on 2020/12/31 6 | 7 | ## Introduction 8 | 9 | **SubzzZ** 10 | can find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations. 11 | 12 | ## Passive Recon via: 13 | 14 | [✔] Crt.sh 15 | 16 | 17 | [✔] Web.Archive.org 18 | 19 | 20 | [✔] Dns.bufferover.run 21 | 22 | 23 | [✔] Threatcrowd.org 24 | 25 | 26 | [✔] Hackertarget.com 27 | 28 | 29 | [✔] Certspotter.com 30 | 31 | 32 | [✔] Anubis-DB(jonlu.ca) 33 | 34 | 35 | [✔] Virustotal 36 | 37 | 38 | [✔] Alienvault(otx) 39 | 40 | 41 | [✔] Urlscan.io 42 | 43 | 44 | [✔] Threatminer 45 | 46 | 47 | [✔] Entrust.com 48 | 49 | 50 | [✔] Riddler.io 51 | 52 | 53 | [✔] Dnsdumpster 54 | 55 | 56 | [✔] Rapiddns 57 | 58 | 59 | [✔] Choas 60 | 61 | ## Active Recon via: 62 | 63 | [✔] Permutations, Mutations, Alterations 64 | 65 | 66 | 67 | ## Usage 68 | ``` 69 | root@me_dheeraj:$ bash subzzZ 70 | [-] Usage: ./subzzZ [-d/--domain] target.com 71 | 72 | Output will be saved in scans/target.com-YYYY-MM-DD directory 73 | ``` 74 | ##### Prerequisites 75 | - python3 76 | - jq 77 | - shuffledns [@projectdiscovery](https://github.com/projectdiscovery/shuffledns) 78 | - massdns [@blechschmidt](https://github.com/blechschmidt/massdns) 79 | - httpx [@pdiscoveryio](https://github.com/projectdiscovery/httpx) 80 | -------------------------------------------------------------------------------- /lists/resolvers.txt: -------------------------------------------------------------------------------- 1 | 1.0.0.1 2 | 1.0.0.2 3 | 1.0.0.3 4 | 1.1.1.1 5 | 1.1.1.2 6 | 1.1.1.3 7 | 1.209.43.1 8 | 1.241.172.70 9 | 1.242.63.131 10 | 1.33.184.106 11 | 1.33.184.119 12 | 1.33.184.147 13 | 1.33.184.210 14 | 1.33.184.216 15 | 1.33.184.227 16 | 1.33.184.235 17 | 1.33.184.237 18 | 1.33.184.24 19 | 1.33.184.242 20 | 1.33.184.250 21 | 1.33.184.94 22 | 1.33.184.98 23 | 1.33.184.99 24 | 1.34.161.95 25 | 101.101.101.101 26 | 101.102.103.104 27 | 101.110.50.106 28 | 101.110.53.193 29 | 101.255.56.249 30 | 101.78.189.210 31 | 101.78.230.190 32 | 103.11.98.161 33 | 103.11.98.187 34 | 103.116.12.199 35 | 103.116.159.141 36 | 103.116.159.145 37 | 103.116.159.150 38 | 103.116.159.185 39 | 103.116.159.191 40 | 103.116.159.60 41 | 103.116.159.70 42 | 103.13.31.240 43 | 103.130.172.242 44 | 103.134.220.158 45 | 103.146.221.20 46 | 103.146.221.21 47 | 103.15.241.241 48 | 103.15.242.145 49 | 103.153.154.2 50 | 103.157.237.34 51 | 103.198.192.43 52 | 103.203.133.66 53 | 103.207.236.34 54 | 103.209.52.250 55 | 103.21.120.85 56 | 103.21.194.19 57 | 103.22.245.70 58 | 103.224.162.40 59 | 103.226.174.4 60 | 103.226.174.7 61 | 103.23.150.88 62 | 103.23.150.89 63 | 103.232.35.101 64 | 103.244.159.82 65 | 103.251.112.62 66 | 103.251.112.67 67 | 103.28.114.57 68 | 103.3.75.98 69 | 103.30.244.197 70 | 103.30.247.73 71 | 103.47.134.195 72 | 103.5.148.99 73 | 103.53.197.218 74 | 103.61.69.185 75 | 103.77.188.18 76 | 103.77.188.19 77 | 103.80.1.2 78 | 103.85.104.22 79 | 103.85.104.36 80 | 103.85.104.38 81 | 103.85.104.40 82 | 103.85.105.210 83 | 103.85.107.100 84 | 103.85.107.102 85 | 103.86.99.100 86 | 103.9.12.5 87 | 104.152.211.99 88 | 104.171.122.67 89 | 104.36.234.65 90 | 104.36.237.205 91 | 106.240.228.50 92 | 107.161.16.30 93 | 107.191.48.176 94 | 108.166.105.234 95 | 109.168.43.86 96 | 109.172.10.70 97 | 109.202.11.6 98 | 109.226.238.177 99 | 109.228.0.164 100 | 109.228.0.238 101 | 109.228.14.101 102 | 109.228.23.101 103 | 109.228.25.186 104 | 109.228.4.246 105 | 109.228.7.95 106 | 109.228.8.13 107 | 109.228.9.40 108 | 109.228.9.74 109 | 109.234.248.8 110 | 109.238.224.178 111 | 109.254.13.190 112 | 109.69.8.51 113 | 109.7.9.141 114 | 109.70.132.18 115 | 109.70.207.43 116 | 109.71.42.228 117 | 109.73.10.58 118 | 109.92.22.97 119 | 110.172.55.126 120 | 110.77.151.42 121 | 111.92.237.107 122 | 112.161.9.158 123 | 112.171.175.135 124 | 113.190.253.229 125 | 113.196.55.130 126 | 114.130.5.5 127 | 114.130.5.6 128 | 114.141.2.103 129 | 114.4.110.164 130 | 115.127.19.129 131 | 115.42.228.246 132 | 115.88.224.200 133 | 116.126.142.201 134 | 116.212.101.10 135 | 116.212.96.75 136 | 116.48.150.197 137 | 117.54.10.217 138 | 118.219.234.144 139 | 119.160.211.198 140 | 119.160.80.164 141 | 119.235.21.188 142 | 119.235.48.3 143 | 119.73.137.211 144 | 12.131.101.32 145 | 12.150.25.218 146 | 12.166.247.4 147 | 121.100.28.163 148 | 121.152.231.196 149 | 121.202.135.11 150 | 121.202.228.25 151 | 122.200.254.203 152 | 122.56.105.82 153 | 123.193.34.20 154 | 124.158.90.27 155 | 124.6.164.69 156 | 124.6.165.23 157 | 124.6.167.149 158 | 124.6.167.35 159 | 124.6.169.35 160 | 124.6.170.225 161 | 124.6.174.103 162 | 124.6.187.38 163 | 124.6.188.231 164 | 125.141.144.67 165 | 125.206.211.218 166 | 125.206.220.10 167 | 125.212.202.19 168 | 125.227.62.229 169 | 129.250.35.250 170 | 129.250.35.251 171 | 129.71.254.12 172 | 130.185.242.224 173 | 130.244.126.100 174 | 131.221.81.1 175 | 134.153.233.140 176 | 138.219.105.100 177 | 138.97.84.2 178 | 138.97.84.3 179 | 139.5.35.58 180 | 14.198.92.130 181 | 14.63.217.213 182 | 141.0.102.202 183 | 142.165.177.96 184 | 144.76.173.169 185 | 144.76.83.104 186 | 146.230.254.16 187 | 146.247.80.144 188 | 146.255.61.177 189 | 148.223.14.148 190 | 148.251.92.241 191 | 148.78.200.7 192 | 149.112.112.10 193 | 149.112.112.112 194 | 149.112.112.12 195 | 149.112.121.10 196 | 149.112.149.112 197 | 149.135.39.195 198 | 150.254.125.203 199 | 151.1.141.155 200 | 151.80.222.79 201 | 152.101.4.130 202 | 153.19.105.120 203 | 154.70.151.66 204 | 154.72.197.138 205 | 154.72.212.38 206 | 156.154.70.16 207 | 156.154.70.5 208 | 156.154.71.1 209 | 156.154.71.2 210 | 156.154.71.5 211 | 157.92.190.15 212 | 158.43.128.1 213 | 158.43.128.72 214 | 159.134.248.17 215 | 162.13.11.127 216 | 162.221.207.228 217 | 162.243.19.47 218 | 162.247.147.98 219 | 162.248.241.94 220 | 163.172.107.158 221 | 164.100.138.248 222 | 164.77.245.34 223 | 165.16.6.43 224 | 165.16.68.1 225 | 165.243.115.78 226 | 165.87.13.129 227 | 165.87.201.244 228 | 165.98.138.194 229 | 167.157.20.2 230 | 167.233.5.203 231 | 167.233.5.204 232 | 168.126.63.2 233 | 168.181.111.10 234 | 168.181.111.20 235 | 168.187.234.58 236 | 168.215.165.186 237 | 168.62.214.68 238 | 168.95.192.1 239 | 169.255.153.58 240 | 169.38.73.5 241 | 169.53.182.120 242 | 169.53.182.124 243 | 170.210.83.110 244 | 170.239.144.20 245 | 171.25.229.166 246 | 172.104.237.57 247 | 172.105.216.54 248 | 172.105.81.90 249 | 172.98.193.42 250 | 173.167.215.57 251 | 173.167.215.62 252 | 173.244.83.5 253 | 173.71.30.195 254 | 175.100.120.27 255 | 175.103.48.7 256 | 175.139.150.29 257 | 175.45.61.220 258 | 176.103.130.131 259 | 176.103.130.136 260 | 176.103.130.137 261 | 176.31.121.197 262 | 176.67.0.60 263 | 177.102.143.166 264 | 177.104.118.42 265 | 177.104.127.114 266 | 177.12.230.174 267 | 177.124.247.2 268 | 177.130.206.101 269 | 177.130.60.40 270 | 177.131.114.86 271 | 177.135.204.163 272 | 177.135.239.132 273 | 177.155.135.81 274 | 177.159.232.50 275 | 177.159.232.53 276 | 177.184.131.54 277 | 177.184.176.5 278 | 177.19.170.162 279 | 177.19.212.19 280 | 177.200.221.66 281 | 177.200.78.209 282 | 177.222.141.3 283 | 177.37.175.11 284 | 177.37.175.32 285 | 177.43.35.247 286 | 177.43.56.139 287 | 177.52.232.7 288 | 177.55.32.240 289 | 177.66.203.10 290 | 177.7.80.204 291 | 177.91.255.10 292 | 177.92.1.38 293 | 177.93.250.3 294 | 178.150.45.81 295 | 178.22.113.198 296 | 178.237.150.2 297 | 178.248.160.140 298 | 178.63.45.130 299 | 179.108.248.9 300 | 179.127.175.242 301 | 179.181.132.219 302 | 179.191.86.162 303 | 179.97.8.94 304 | 180.180.247.37 305 | 180.180.247.38 306 | 180.180.247.41 307 | 180.180.247.42 308 | 180.180.247.43 309 | 180.94.94.194 310 | 180.94.94.195 311 | 181.14.245.186 312 | 181.175.22.26 313 | 181.209.238.13 314 | 181.210.92.7 315 | 181.224.225.3 316 | 181.48.29.108 317 | 181.49.2.242 318 | 182.171.247.189 319 | 182.19.95.34 320 | 182.93.18.83 321 | 182.93.18.84 322 | 183.100.49.21 323 | 183.177.101.51 324 | 184.149.50.25 325 | 184.71.101.186 326 | 185.107.80.84 327 | 185.121.177.177 328 | 185.137.244.2 329 | 185.184.222.222 330 | 185.222.222.222 331 | 185.228.169.9 332 | 185.43.135.1 333 | 185.51.61.101 334 | 185.66.9.142 335 | 185.8.3.151 336 | 185.92.196.182 337 | 185.98.244.214 338 | 186.148.128.86 339 | 186.179.241.146 340 | 186.193.207.158 341 | 186.194.224.82 342 | 186.211.1.191 343 | 186.215.128.142 344 | 186.216.62.17 345 | 186.216.62.29 346 | 186.216.62.33 347 | 186.216.62.77 348 | 186.216.62.85 349 | 186.216.63.97 350 | 186.219.242.26 351 | 186.237.202.26 352 | 186.251.103.10 353 | 186.251.103.3 354 | 186.251.226.252 355 | 186.38.56.11 356 | 187.157.46.210 357 | 187.16.105.10 358 | 187.188.112.16 359 | 187.32.81.194 360 | 187.32.81.223 361 | 187.33.230.114 362 | 187.45.188.82 363 | 187.49.127.110 364 | 187.51.127.93 365 | 187.6.84.178 366 | 187.61.9.42 367 | 187.62.226.33 368 | 187.75.155.116 369 | 188.0.173.134 370 | 188.118.227.21 371 | 188.124.210.1 372 | 188.138.57.95 373 | 188.21.14.72 374 | 188.213.49.35 375 | 188.225.84.142 376 | 188.227.240.58 377 | 188.227.30.46 378 | 188.252.69.3 379 | 188.40.115.29 380 | 189.111.254.56 381 | 189.113.132.101 382 | 189.125.102.209 383 | 189.125.17.210 384 | 189.125.18.5 385 | 189.125.19.198 386 | 189.125.73.13 387 | 189.126.192.4 388 | 189.22.227.194 389 | 189.23.31.242 390 | 189.3.153.109 391 | 189.38.96.50 392 | 189.4.130.159 393 | 189.42.239.34 394 | 189.51.144.23 395 | 189.55.193.173 396 | 189.56.100.42 397 | 189.56.88.82 398 | 189.8.80.35 399 | 189.89.61.244 400 | 189.90.241.10 401 | 190.105.152.28 402 | 190.109.224.227 403 | 190.124.166.8 404 | 190.149.249.57 405 | 190.149.251.173 406 | 190.151.144.21 407 | 190.167.229.12 408 | 190.211.104.93 409 | 190.8.168.1 410 | 190.86.139.62 411 | 192.100.164.125 412 | 192.116.158.140 413 | 192.141.232.10 414 | 192.146.229.22 415 | 192.195.100.3 416 | 192.221.134.0 417 | 192.221.135.0 418 | 192.43.161.22 419 | 193.110.252.21 420 | 193.110.60.3 421 | 193.15.1.54 422 | 193.159.232.5 423 | 193.17.47.1 424 | 193.178.35.130 425 | 193.190.213.42 426 | 193.190.66.4 427 | 193.190.75.119 428 | 193.200.69.242 429 | 193.215.74.3 430 | 193.22.119.195 431 | 193.226.61.1 432 | 193.238.75.217 433 | 193.251.169.83 434 | 193.252.10.2 435 | 193.26.6.215 436 | 193.29.2.4 437 | 193.33.224.253 438 | 193.34.173.206 439 | 193.58.251.251 440 | 193.67.79.39 441 | 193.78.240.12 442 | 193.79.242.39 443 | 193.95.93.243 444 | 193.95.93.77 445 | 194.145.240.6 446 | 194.145.240.7 447 | 194.145.241.6 448 | 194.158.78.137 449 | 194.168.4.123 450 | 194.168.8.123 451 | 194.172.160.4 452 | 194.179.1.100 453 | 194.209.157.109 454 | 194.224.229.56 455 | 194.247.190.70 456 | 194.61.59.25 457 | 194.7.1.4 458 | 194.7.138.41 459 | 194.7.15.70 460 | 195.113.144.194 461 | 195.140.195.21 462 | 195.158.0.3 463 | 195.162.8.154 464 | 195.18.138.5 465 | 195.198.13.186 466 | 195.202.147.102 467 | 195.204.130.85 468 | 195.22.112.84 469 | 195.22.25.130 470 | 195.228.219.226 471 | 195.230.115.3 472 | 195.235.225.10 473 | 195.239.136.106 474 | 195.239.36.27 475 | 195.239.49.194 476 | 195.35.110.4 477 | 195.46.186.75 478 | 195.46.39.39 479 | 195.46.39.40 480 | 195.53.69.148 481 | 195.77.162.220 482 | 195.77.235.10 483 | 195.77.252.36 484 | 195.77.252.37 485 | 195.77.90.230 486 | 195.8.8.2 487 | 195.88.154.11 488 | 195.88.203.248 489 | 196.15.170.131 490 | 196.216.32.2 491 | 196.3.132.154 492 | 197.149.129.110 493 | 197.253.12.229 494 | 198.153.194.1 495 | 198.175.228.33 496 | 198.190.61.1 497 | 198.199.103.49 498 | 198.251.100.2 499 | 198.50.212.61 500 | 198.82.247.34 501 | 198.99.193.1 502 | 199.101.81.97 503 | 199.16.102.19 504 | 199.16.220.189 505 | 199.2.252.10 506 | 199.85.126.10 507 | 199.85.127.10 508 | 200.10.231.110 509 | 200.10.231.190 510 | 200.105.133.162 511 | 200.105.253.170 512 | 200.108.138.2 513 | 200.11.52.202 514 | 200.110.130.194 515 | 200.115.141.136 516 | 200.115.141.138 517 | 200.115.141.140 518 | 200.115.176.23 519 | 200.119.192.58 520 | 200.142.160.54 521 | 200.143.177.83 522 | 200.144.5.54 523 | 200.148.191.197 524 | 200.150.68.126 525 | 200.150.82.154 526 | 200.150.84.26 527 | 200.159.205.11 528 | 200.169.8.1 529 | 200.169.88.1 530 | 200.169.96.10 531 | 200.169.96.11 532 | 200.172.90.4 533 | 200.175.4.220 534 | 200.179.97.194 535 | 200.181.14.3 536 | 200.194.198.75 537 | 200.194.198.76 538 | 200.195.132.210 539 | 200.195.136.198 540 | 200.195.143.194 541 | 200.195.148.172 542 | 200.195.154.122 543 | 200.195.180.226 544 | 200.195.185.234 545 | 200.196.57.42 546 | 200.201.191.91 547 | 200.202.233.21 548 | 200.205.150.210 549 | 200.212.2.125 550 | 200.220.192.86 551 | 200.221.11.100 552 | 200.221.11.101 553 | 200.222.51.208 554 | 200.223.129.162 555 | 200.229.128.21 556 | 200.252.235.19 557 | 200.252.235.20 558 | 200.3.249.89 559 | 200.35.80.154 560 | 200.40.228.114 561 | 200.42.174.188 562 | 200.42.174.250 563 | 200.45.184.43 564 | 200.55.54.234 565 | 200.85.34.34 566 | 200.85.34.42 567 | 200.97.90.170 568 | 201.134.115.36 569 | 201.144.135.211 570 | 201.144.183.147 571 | 201.174.34.195 572 | 201.28.69.242 573 | 201.28.69.243 574 | 201.30.200.130 575 | 201.30.92.45 576 | 201.39.214.142 577 | 201.44.177.131 578 | 201.45.193.131 579 | 201.63.81.10 580 | 202.130.102.211 581 | 202.130.97.66 582 | 202.134.52.105 583 | 202.134.87.4 584 | 202.139.96.50 585 | 202.147.193.107 586 | 202.152.77.212 587 | 202.155.222.251 588 | 202.158.38.162 589 | 202.158.49.187 590 | 202.158.49.188 591 | 202.164.44.246 592 | 202.174.158.10 593 | 202.175.19.169 594 | 202.175.45.2 595 | 202.175.47.234 596 | 202.175.63.36 597 | 202.175.63.37 598 | 202.175.82.179 599 | 202.181.242.131 600 | 202.191.108.42 601 | 202.191.98.131 602 | 202.191.98.132 603 | 202.21.99.42 604 | 202.222.192.33 605 | 202.29.172.153 606 | 202.30.55.11 607 | 202.43.162.100 608 | 202.43.162.37 609 | 202.44.204.36 610 | 202.44.53.251 611 | 202.44.55.66 612 | 202.44.80.25 613 | 202.46.32.187 614 | 202.46.34.74 615 | 202.46.34.76 616 | 202.49.127.71 617 | 202.51.111.149 618 | 202.56.8.198 619 | 202.58.199.171 620 | 202.64.161.118 621 | 202.83.121.10 622 | 202.86.128.85 623 | 202.86.133.35 624 | 202.86.149.20 625 | 202.86.191.50 626 | 202.87.248.210 627 | 202.87.249.5 628 | 202.88.99.221 629 | 202.92.168.47 630 | 203.123.229.120 631 | 203.126.107.195 632 | 203.126.238.211 633 | 203.127.232.194 634 | 203.141.131.66 635 | 203.144.207.29 636 | 203.145.118.46 637 | 203.146.127.85 638 | 203.147.7.7 639 | 203.174.95.29 640 | 203.189.89.177 641 | 203.190.55.129 642 | 203.190.55.94 643 | 203.198.7.66 644 | 203.199.60.11 645 | 203.201.60.12 646 | 203.235.1.3 647 | 203.239.130.3 648 | 203.239.190.50 649 | 203.253.64.1 650 | 203.63.219.26 651 | 203.8.201.10 652 | 203.80.116.234 653 | 203.85.45.24 654 | 203.85.45.26 655 | 204.106.240.53 656 | 204.117.214.10 657 | 204.13.152.3 658 | 204.15.52.15 659 | 204.193.157.30 660 | 204.194.232.200 661 | 204.194.234.200 662 | 204.95.160.4 663 | 204.97.212.10 664 | 205.147.105.236 665 | 205.171.2.65 666 | 205.171.202.25 667 | 205.171.3.25 668 | 206.165.6.12 669 | 206.212.241.14 670 | 206.251.24.16 671 | 207.188.83.213 672 | 207.248.224.72 673 | 207.47.132.29 674 | 207.59.153.242 675 | 207.67.115.254 676 | 207.99.19.69 677 | 208.106.131.28 678 | 208.106.131.30 679 | 208.25.96.18 680 | 208.254.148.100 681 | 208.66.105.4 682 | 208.67.220.220 683 | 208.67.220.222 684 | 208.67.222.220 685 | 208.67.222.222 686 | 208.79.218.162 687 | 208.91.112.220 688 | 209.137.146.2 689 | 209.191.129.65 690 | 209.200.117.42 691 | 209.211.254.18 692 | 209.211.254.19 693 | 209.213.232.32 694 | 209.225.106.43 695 | 209.237.227.198 696 | 209.237.227.203 697 | 209.244.0.3 698 | 209.244.0.53 699 | 209.252.188.103 700 | 209.252.188.104 701 | 209.29.150.135 702 | 210.0.128.241 703 | 210.0.128.242 704 | 210.0.128.251 705 | 210.0.255.216 706 | 210.0.255.250 707 | 210.0.255.251 708 | 210.1.31.42 709 | 210.1.58.21 710 | 210.1.58.22 711 | 210.116.119.185 712 | 210.16.120.48 713 | 210.176.64.218 714 | 210.177.222.162 715 | 210.177.222.168 716 | 210.190.105.66 717 | 210.227.116.101 718 | 210.232.183.3 719 | 210.232.97.146 720 | 210.242.162.116 721 | 210.242.86.26 722 | 210.245.89.21 723 | 210.48.77.69 724 | 210.5.56.145 725 | 210.57.214.83 726 | 210.61.2.99 727 | 210.66.73.137 728 | 210.87.250.59 729 | 211.105.7.5 730 | 211.107.234.129 731 | 211.11.195.114 732 | 211.129.155.175 733 | 211.18.198.110 734 | 211.181.233.206 735 | 211.195.214.13 736 | 211.221.79.4 737 | 211.34.105.59 738 | 211.38.3.14 739 | 211.72.106.204 740 | 211.72.109.235 741 | 212.100.143.211 742 | 212.118.0.1 743 | 212.118.241.33 744 | 212.124.226.242 745 | 212.152.166.82 746 | 212.170.159.10 747 | 212.19.106.134 748 | 212.19.96.2 749 | 212.200.113.130 750 | 212.216.172.222 751 | 212.23.64.92 752 | 212.230.255.1 753 | 212.230.255.129 754 | 212.237.125.216 755 | 212.244.78.90 756 | 212.33.80.231 757 | 212.36.64.16 758 | 212.36.64.17 759 | 212.43.98.12 760 | 212.66.129.107 761 | 212.89.130.180 762 | 212.9.28.233 763 | 213.0.77.5 764 | 213.124.119.218 765 | 213.125.105.234 766 | 213.156.49.106 767 | 213.157.50.130 768 | 213.171.110.153 769 | 213.171.217.147 770 | 213.171.217.148 771 | 213.182.60.11 772 | 213.184.225.37 773 | 213.195.214.123 774 | 213.229.161.85 775 | 213.241.88.98 776 | 213.5.120.2 777 | 213.55.96.148 778 | 213.65.136.170 779 | 213.8.5.220 780 | 213.91.221.2 781 | 216.106.1.2 782 | 216.106.1.254 783 | 216.106.88.3 784 | 216.136.95.2 785 | 216.146.35.35 786 | 216.17.128.1 787 | 216.173.178.83 788 | 216.218.245.200 789 | 216.228.104.3 790 | 216.237.114.148 791 | 216.237.114.149 792 | 216.254.141.13 793 | 216.46.141.99 794 | 216.52.254.1 795 | 216.52.97.33 796 | 216.66.104.72 797 | 217.108.101.30 798 | 217.13.116.4 799 | 217.13.80.252 800 | 217.170.128.27 801 | 217.174.240.99 802 | 217.182.198.203 803 | 217.19.153.3 804 | 217.195.211.116 805 | 217.29.20.126 806 | 217.30.169.18 807 | 217.66.228.248 808 | 217.73.17.110 809 | 217.75.213.19 810 | 217.77.71.1 811 | 217.79.177.220 812 | 218.102.1.8 813 | 218.102.23.228 814 | 218.103.8.74 815 | 218.146.255.235 816 | 218.149.84.50 817 | 218.38.58.185 818 | 219.252.2.100 819 | 219.99.166.50 820 | 220.128.154.100 821 | 220.241.92.140 822 | 221.141.2.172 823 | 221.154.98.205 824 | 223.197.203.142 825 | 223.197.220.13 826 | 223.31.121.171 827 | 24.181.107.226 828 | 24.181.107.227 829 | 24.181.107.228 830 | 24.181.107.229 831 | 24.181.107.231 832 | 24.229.250.113 833 | 24.48.219.154 834 | 27.123.22.82 835 | 31.3.193.62 836 | 31.47.196.210 837 | 37.111.49.162 838 | 37.111.49.182 839 | 37.152.45.194 840 | 37.153.202.186 841 | 37.187.34.231 842 | 37.195.200.66 843 | 37.235.1.177 844 | 37.235.70.59 845 | 37.29.119.100 846 | 37.59.80.218 847 | 38.132.106.139 848 | 4.0.0.53 849 | 4.2.2.1 850 | 4.2.2.4 851 | 41.221.192.167 852 | 41.242.153.26 853 | 42.116.255.180 854 | 43.225.201.196 855 | 43.227.12.72 856 | 43.227.15.68 857 | 43.229.60.176 858 | 43.229.62.192 859 | 45.173.200.10 860 | 45.250.202.253 861 | 45.33.97.5 862 | 45.55.147.169 863 | 45.64.60.185 864 | 45.77.61.165 865 | 45.90.28.0 866 | 45.90.28.165 867 | 45.90.28.193 868 | 45.90.28.226 869 | 45.90.30.193 870 | 45.90.30.226 871 | 46.105.55.84 872 | 46.107.30.182 873 | 46.16.216.25 874 | 46.166.189.68 875 | 46.182.19.48 876 | 46.20.67.50 877 | 46.231.210.26 878 | 46.234.226.122 879 | 46.246.29.69 880 | 46.28.130.214 881 | 46.47.82.141 882 | 47.90.0.25 883 | 49.0.184.30 884 | 5.102.56.138 885 | 5.102.56.169 886 | 5.102.56.177 887 | 5.2.75.231 888 | 5.253.114.91 889 | 5.58.74.133 890 | 5.83.92.254 891 | 5.9.172.92 892 | 50.194.130.97 893 | 50.204.108.198 894 | 52.3.100.184 895 | 54.174.40.213 896 | 58.185.177.165 897 | 58.27.149.60 898 | 58.27.149.70 899 | 59.120.9.23 900 | 59.124.69.205 901 | 59.124.71.99 902 | 59.125.182.149 903 | 59.127.13.183 904 | 59.148.214.44 905 | 59.148.249.214 906 | 59.148.250.34 907 | 59.152.214.132 908 | 59.153.85.25 909 | 59.188.74.1 910 | 60.244.115.166 911 | 60.248.34.85 912 | 60.249.212.149 913 | 60.250.82.24 914 | 60.32.151.210 915 | 61.111.22.2 916 | 61.125.143.90 917 | 61.19.251.237 918 | 61.196.252.28 919 | 61.209.255.131 920 | 61.219.108.121 921 | 61.222.14.170 922 | 61.33.234.2 923 | 61.60.85.66 924 | 61.78.59.74 925 | 61.90.191.10 926 | 61.92.164.145 927 | 61.93.207.118 928 | 61.93.221.46 929 | 62.105.147.13 930 | 62.129.252.215 931 | 62.146.202.2 932 | 62.149.128.2 933 | 62.149.128.4 934 | 62.149.132.2 935 | 62.168.251.166 936 | 62.181.235.45 937 | 62.197.103.39 938 | 62.2.121.88 939 | 62.212.113.125 940 | 62.219.21.64 941 | 62.225.102.177 942 | 62.225.66.19 943 | 62.28.103.134 944 | 62.28.166.140 945 | 62.28.183.147 946 | 62.28.227.166 947 | 62.28.250.13 948 | 62.37.225.56 949 | 62.37.225.57 950 | 62.40.32.33 951 | 62.48.241.226 952 | 62.48.250.106 953 | 62.82.213.91 954 | 62.85.160.208 955 | 62.86.183.222 956 | 62.91.19.67 957 | 62.97.123.106 958 | 62.97.123.107 959 | 62.97.196.149 960 | 62.97.223.62 961 | 62.97.70.131 962 | 62.99.77.54 963 | 63.142.251.101 964 | 64.107.45.5 965 | 64.111.16.3 966 | 64.128.251.228 967 | 64.132.94.250 968 | 64.2.142.22 969 | 64.233.207.16 970 | 64.247.161.186 971 | 64.6.64.6 972 | 64.6.65.6 973 | 64.9.50.67 974 | 64.94.33.33 975 | 65.171.146.11 976 | 65.18.117.174 977 | 65.18.117.234 978 | 65.18.117.236 979 | 65.18.117.237 980 | 65.203.109.2 981 | 65.220.42.38 982 | 65.39.166.132 983 | 65.39.166.134 984 | 65.49.37.195 985 | 65.73.54.2 986 | 66.155.216.122 987 | 66.162.39.114 988 | 66.18.240.197 989 | 66.199.241.115 990 | 66.199.45.225 991 | 66.240.146.122 992 | 66.251.35.130 993 | 66.28.0.61 994 | 66.76.13.250 995 | 66.96.229.59 996 | 66.98.34.58 997 | 67.210.172.116 998 | 67.79.47.3 999 | 68.216.230.2 1000 | 68.87.64.146 1001 | 68.87.68.162 1002 | 68.87.68.166 1003 | 68.87.72.130 1004 | 68.87.72.134 1005 | 68.87.73.242 1006 | 68.87.73.246 1007 | 68.87.74.162 1008 | 68.87.75.194 1009 | 68.87.75.198 1010 | 68.87.76.178 1011 | 68.87.76.182 1012 | 69.10.79.20 1013 | 69.160.0.186 1014 | 69.160.4.114 1015 | 69.160.4.206 1016 | 69.20.169.49 1017 | 69.20.190.209 1018 | 69.20.190.253 1019 | 69.24.197.9 1020 | 69.59.209.34 1021 | 69.60.134.50 1022 | 69.63.73.141 1023 | 69.67.97.18 1024 | 69.70.21.150 1025 | 71.122.219.170 1026 | 74.120.24.129 1027 | 74.203.248.220 1028 | 74.50.211.90 1029 | 74.82.42.42 1030 | 74.84.64.170 1031 | 74.93.247.57 1032 | 75.103.119.77 1033 | 75.117.247.211 1034 | 76.164.163.150 1035 | 76.72.248.34 1036 | 77.68.30.86 1037 | 77.68.45.252 1038 | 77.68.83.207 1039 | 77.85.169.102 1040 | 77.88.8.1 1041 | 77.88.8.2 1042 | 77.88.8.3 1043 | 77.88.8.7 1044 | 77.88.8.8 1045 | 77.88.8.88 1046 | 77.89.230.9 1047 | 78.110.93.91 1048 | 78.156.159.132 1049 | 78.9.110.22 1050 | 79.141.83.250 1051 | 79.143.180.116 1052 | 79.161.49.34 1053 | 79.175.208.28 1054 | 79.187.201.179 1055 | 79.187.201.181 1056 | 79.190.224.27 1057 | 8.0.6.0 1058 | 8.0.7.0 1059 | 8.20.247.10 1060 | 8.20.247.20 1061 | 8.26.56.10 1062 | 8.8.4.4 1063 | 8.8.8.8 1064 | 80.15.35.59 1065 | 80.179.155.4 1066 | 80.228.63.124 1067 | 80.248.14.50 1068 | 80.254.5.142 1069 | 80.66.120.34 1070 | 80.66.158.118 1071 | 80.67.169.12 1072 | 80.67.169.40 1073 | 80.80.80.80 1074 | 80.80.81.81 1075 | 80.81.232.30 1076 | 80.83.162.11 1077 | 80.95.220.186 1078 | 81.1.217.134 1079 | 81.116.141.156 1080 | 81.169.230.157 1081 | 81.17.31.34 1082 | 81.170.175.117 1083 | 81.175.26.1 1084 | 81.175.40.21 1085 | 81.192.169.249 1086 | 81.211.103.218 1087 | 81.211.96.62 1088 | 81.222.251.2 1089 | 81.27.162.100 1090 | 81.3.169.172 1091 | 81.3.27.54 1092 | 81.82.196.44 1093 | 81.83.12.253 1094 | 81.83.18.23 1095 | 81.83.8.129 1096 | 81.95.125.20 1097 | 82.103.129.72 1098 | 82.134.16.250 1099 | 82.137.245.66 1100 | 82.141.171.84 1101 | 82.148.207.170 1102 | 82.165.76.185 1103 | 82.196.13.196 1104 | 82.208.99.185 1105 | 82.209.228.234 1106 | 82.223.210.111 1107 | 82.80.196.156 1108 | 82.96.64.2 1109 | 83.144.93.10 1110 | 83.170.202.226 1111 | 83.221.202.188 1112 | 83.240.158.216 1113 | 83.97.23.226 1114 | 84.124.52.46 1115 | 84.16.240.43 1116 | 84.18.156.85 1117 | 84.200.69.80 1118 | 84.200.70.40 1119 | 84.236.142.130 1120 | 84.53.244.67 1121 | 84.54.226.50 1122 | 84.95.241.10 1123 | 84.96.26.129 1124 | 85.132.32.41 1125 | 85.175.194.48 1126 | 85.18.52.172 1127 | 85.214.20.141 1128 | 85.93.212.2 1129 | 85.93.217.105 1130 | 85.94.178.198 1131 | 86.107.249.193 1132 | 86.48.98.10 1133 | 86.53.112.126 1134 | 87.213.100.113 1135 | 87.229.187.110 1136 | 87.233.226.243 1137 | 87.247.10.22 1138 | 87.96.144.179 1139 | 88.149.193.46 1140 | 88.151.140.202 1141 | 88.151.179.6 1142 | 88.157.200.129 1143 | 88.198.37.146 1144 | 88.208.211.65 1145 | 88.208.218.166 1146 | 88.208.245.220 1147 | 88.208.248.13 1148 | 88.213.251.98 1149 | 88.59.65.21 1150 | 88.79.149.4 1151 | 88.80.64.8 1152 | 89.106.109.235 1153 | 89.108.128.220 1154 | 89.150.195.195 1155 | 89.160.9.203 1156 | 89.17.194.43 1157 | 89.191.129.104 1158 | 89.211.53.228 1159 | 89.233.43.71 1160 | 89.237.130.186 1161 | 89.238.177.131 1162 | 89.255.2.227 1163 | 89.255.2.229 1164 | 89.26.249.19 1165 | 89.29.128.250 1166 | 9.9.9.10 1167 | 9.9.9.9 1168 | 90.183.151.106 1169 | 90.183.151.107 1170 | 90.187.33.117 1171 | 91.112.103.26 1172 | 91.117.103.227 1173 | 91.121.134.117 1174 | 91.121.3.87 1175 | 91.122.77.189 1176 | 91.147.96.169 1177 | 91.183.238.145 1178 | 91.200.116.22 1179 | 91.200.227.141 1180 | 91.204.4.133 1181 | 91.208.193.1 1182 | 91.221.229.84 1183 | 92.111.212.210 1184 | 92.222.117.114 1185 | 92.223.65.32 1186 | 92.36.225.9 1187 | 92.60.50.40 1188 | 93.104.195.2 1189 | 93.115.24.204 1190 | 93.123.112.99 1191 | 93.187.83.200 1192 | 93.187.83.201 1193 | 93.63.229.132 1194 | 93.91.145.230 1195 | 94.140.14.14 1196 | 94.140.14.140 1197 | 94.190.183.145 1198 | 94.200.27.186 1199 | 94.245.40.116 1200 | 94.247.43.254 1201 | 94.255.146.44 1202 | 94.56.151.22 1203 | 95.104.194.3 1204 | 95.129.58.55 1205 | 95.140.194.110 1206 | 95.87.252.178 1207 | 98.101.120.225 1208 | -------------------------------------------------------------------------------- /lists/words.txt: -------------------------------------------------------------------------------- 1 | 1 2 | 10 3 | 11 4 | 12 5 | 13 6 | 14 7 | 15 8 | 16 9 | 17 10 | 18 11 | 19 12 | 2 13 | 20 14 | 2009 15 | 2010 16 | 2011 17 | 2012 18 | 2013 19 | 2014 20 | 2015 21 | 2016 22 | 2017 23 | 2018 24 | 2019 25 | 2020 26 | 2021 27 | 3 28 | 4 29 | 5 30 | 6 31 | 7 32 | 8 33 | 9 34 | a 35 | acc 36 | accept 37 | accounts 38 | infra 39 | d 40 | adm 41 | admin 42 | admin1 43 | administrator 44 | akali 45 | akamai 46 | alpha 47 | alt 48 | america 49 | analytics 50 | api 51 | api1 52 | apis 53 | api-docs 54 | apollo 55 | april 56 | aws 57 | b 58 | backend 59 | beta 60 | billing 61 | boards 62 | box 63 | brand 64 | bucket 65 | bucky 66 | c 67 | cdn 68 | cf 69 | chef 70 | ci 71 | client 72 | cloudfront 73 | cms 74 | cms1 75 | cn 76 | com 77 | config 78 | conf 79 | confluence 80 | container 81 | control 82 | data 83 | dec 84 | demo 85 | dev 86 | dev1 87 | developer 88 | devel 89 | test1 90 | test2 91 | q 92 | v 93 | auth 94 | repo 95 | edge 96 | qq 97 | dd 98 | development 99 | testing 100 | integration 101 | inter 102 | design 103 | designs 104 | des 105 | ads 106 | quiz 107 | prod 108 | production 109 | produ 110 | sap 111 | devops 112 | docker 113 | docs 114 | drop 115 | elasticbeanstalk 116 | elb 117 | email 118 | mail 119 | eng 120 | engima 121 | engine 122 | plugins 123 | engineering 124 | eu 125 | europe 126 | euw 127 | euwe 128 | events 129 | feb 130 | fet 131 | firewall 132 | forms 133 | forum 134 | frontpage 135 | fw 136 | games 137 | gh 138 | ghcpi 139 | git 140 | github 141 | gitlab 142 | global 143 | hkg 144 | hw 145 | hwcdn 146 | i 147 | ids 148 | int 149 | internal 150 | jenkins 151 | jinx 152 | july 153 | june 154 | lan 155 | las 156 | lax 157 | lax1 158 | lb 159 | loadbalancer 160 | login 161 | machine 162 | mail 163 | march 164 | merch 165 | mirror 166 | na 167 | nautilus 168 | net 169 | nginx 170 | apache 171 | nl 172 | node 173 | nov 174 | oct 175 | ops 176 | org 177 | origin 178 | page 179 | pantheon 180 | pass 181 | pay 182 | payment 183 | pc 184 | php 185 | pl 186 | preferences 187 | priv 188 | private 189 | profile 190 | profiles 191 | promo 192 | promotion 193 | proxy 194 | redirector 195 | redir 196 | region 197 | repository 198 | repo 199 | reset 200 | restrict 201 | restricted 202 | reviews 203 | s 204 | s3 205 | sandbox 206 | search 207 | secure 208 | security 209 | sept 210 | server 211 | service 212 | singed 213 | skins 214 | spring 215 | ssl 216 | staff 217 | stage 218 | stage1 219 | staging 220 | static 221 | support 222 | swagger 223 | system 224 | tool 225 | tools 226 | addons 227 | addon 228 | preprod 229 | op 230 | t 231 | train 232 | training 233 | team 234 | test 235 | testbed 236 | testing1 237 | tomcat 238 | tpe 239 | tr 240 | trial 241 | twitch 242 | uat 243 | v1 244 | v2 245 | vi 246 | vpn 247 | w3 248 | web 249 | web1 250 | webapp 251 | app 252 | z 253 | -------------------------------------------------------------------------------- /subzzZ: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | #clear 3 | # Colours 4 | red="\e[31m" 5 | green="\e[32m" 6 | yellow="\e[33m" 7 | bold=$(tput bold) 8 | normal=$(tput sgr0) 9 | right=$(printf '\xE2\x9C\x94') 10 | end="\e[0m" 11 | 12 | banner() { 13 | [ "$silent" == False ] && echo "💀💀💀💀💀💀💀💀💀" 14 | [ "$silent" == False ] && echo -e "💀${bold}$green Have a beer🍺💀 $end${normal}" 15 | [ "$silent" == False ] && echo "💀💀💀💀💀💀💀💀💀" 16 | [ "$silent" == False ] && echo -e " ${bold}- twitter.com/Dheerajmadhukar : @me_dheeraj${normal}" 17 | [ "$silent" == False ] && echo "" 18 | } 19 | # Usage 20 | Usage() { 21 | echo -e "$green 22 | Usage: ./subzzZ [-d/--domain] target.com 23 | -s / --silent : Only print raw data 24 | "$end 25 | exit 1 26 | } 27 | get_subzzZ() { 28 | [ "$silent" == False ] && echo -e ">> \e[36msubzzZ\e[0m is in progress" 29 | folder=$target-$(date '-I') 30 | rm -rf "scans/$folder" &> /dev/null 31 | mkdir -p "scans/$folder" && cd "scans/$folder" 32 | 33 | #CRT.SH 34 | curl -s "https://crt.sh/?q=%25.$target&output=json"| jq -r '.[].name_value' 2>/dev/null | sed 's/\*\.//g' | sort -u | grep -o "\w.*$target" > $target-crt_domains.txt 35 | [ "$silent" == False ] && echo -e "[$right] Crt.sh Over => $(wc -l $target-crt_domains.txt|awk '{ print $1}')" 36 | #WAY-ARCHIVE 37 | curl -s "http://web.archive.org/cdx/search/cdx?url=*.$target/*&output=text&fl=original&collapse=urlkey" | sed -e 's_https*://__' -e "s/\/.*//" -e 's/:.*//' -e 's/^www\.//' |sort -u > $target-warchive_domains.txt 38 | [ "$silent" == False ] && echo "[$right] Web.Archive.org Over => $(wc -l $target-warchive_domains.txt|awk '{ print $1}')" 39 | #DNS-BUFFER 40 | curl -s "https://dns.bufferover.run/dns?q=.$target" | jq -r .FDNS_A[] 2>/dev/null | cut -d ',' -f2 | grep -o "\w.*$target" | sort -u > $target-dnsbuffer_domains.txt 41 | curl -s "https://dns.bufferover.run/dns?q=.$target" | jq -r .RDNS[] 2>/dev/null | cut -d ',' -f2 | grep -o "\w.*$target" | sort -u >> $target-dnsbuffer_domains.txt 42 | curl -s "https://tls.bufferover.run/dns?q=.$target" | jq -r .Results 2>/dev/null | cut -d ',' -f3 |grep -o "\w.*$target"| sort -u >> $target-dnsbuffer_domains.txt 43 | [ "$silent" == False ] && echo "[$right] Dns.bufferover.run Over => $(wc -l $target-dnsbuffer_domains.txt|awk '{ print $1}')" 44 | #Threatcrowd 45 | curl -s "https://www.threatcrowd.org/searchApi/v2/domain/report/?domain=$target"|jq -r '.subdomains' 2>/dev/null |grep -o "\w.*$target" > $target-threatcrowd_domains.txt 46 | [ "$silent" == False ] && echo "[$right] Threatcrowd.org Over => $(wc -l $target-threatcrowd_domains.txt|awk '{ print $1}')" 47 | #HackerTarget 48 | curl -s "https://api.hackertarget.com/hostsearch/?q=$target"|grep -o "\w.*$target"> $target-hackertarget_domains.txt 49 | [ "$silent" == False ] && echo "[$right] Hackertarget.com Over => $(wc -l $target-hackertarget_domains.txt | awk '{ print $1}')" 50 | #Certspotter 51 | curl -s "https://certspotter.com/api/v0/certs?domain=$target" | jq -r '.[].dns_names[]' 2>/dev/null | grep -o "\w.*$target" | sort -u > $target-certspotter_domains.txt 52 | [ "$silent" == False ] && echo "[$right] Certspotter.com Over => $(wc -l $target-certspotter_domains.txt | awk '{ print $1}')" 53 | #anubisdb 54 | curl -s "https://jldc.me/anubis/subdomains/$target" | jq -r '.' 2>/dev/null | grep -o "\w.*$target" > $target-anubisdb_domains.txt 55 | [ "$silent" == False ] && echo "[$right] Anubis-DB(jonlu.ca) Over => $(wc -l $target-anubisdb_domains.txt|awk '{ print $1}')" 56 | #virustotal 57 | curl -s "https://www.virustotal.com/ui/domains/$target/subdomains?limit=40"|jq -r '.' 2>/dev/null |grep id|grep -o "\w.*$target"|cut -d '"' -f3|egrep -v " " > $target-virustotal_domains.txt 58 | [ "$silent" == False ] && echo "[$right] Virustotal Over => $(wc -l $target-virustotal_domains.txt|awk '{ print $1}')" 59 | #alienvault 60 | curl -s "https://otx.alienvault.com/api/v1/indicators/domain/$target/passive_dns"|jq '.passive_dns[].hostname' 2>/dev/null |grep -o "\w.*$target"|sort -u > $target-alienvault_domains.txt 61 | [ "$silent" == False ] && echo "[$right] Alienvault(otx) Over => $(wc -l $target-alienvault_domains.txt|awk '{ print $1}')" 62 | #urlscan 63 | curl -s "https://urlscan.io/api/v1/search/?q=domain:$target"|jq '.results[].page.domain' 2>/dev/null |grep -o "\w.*$target"|sort -u > $target-urlscan_domains.txt 64 | [ "$silent" == False ] && echo "[$right] Urlscan.io Over => $(wc -l $target-urlscan_domains.txt|awk '{ print $1}')" 65 | #threatminer 66 | curl -s "https://api.threatminer.org/v2/domain.php?q=$target&rt=5" | jq -r '.results[]' 2>/dev/null |grep -o "\w.*$1"|sort -u > $target-threatminer_domains.txt 67 | [ "$silent" == False ] && echo "[$right] Threatminer Over => $(wc -l $target-threatminer_domains.txt|awk '{ print $1}')" 68 | #entrust 69 | curl -s "https://ctsearch.entrust.com/api/v1/certificates?fields=subjectDN&domain=$target&includeExpired=false&exactMatch=false&limit=5000" | jq -r '.[].subjectDN' 2>/dev/null |sed 's/cn=//g'|grep -o "\w.*$target"|sort -u > $target-entrust_domains.txt 70 | [ "$silent" == False ] && echo "[$right] Entrust.com Over => $(wc -l $target-entrust_domains.txt|awk '{ print $1}')" 71 | #riddler 72 | curl -s "https://riddler.io/search/exportcsv?q=pld:$target"| grep -o "\w.*$target"|awk -F, '{print $6}'|sort -u > $target-riddler_domains.txt 73 | curl -s "https://riddler.io/search/exportcsv?q=pld:$target"|cut -d "," -f6|grep $target|sort -u >>$target-riddler_domains.txt 74 | [ "$silent" == False ] && echo "[$right] Riddler.io Over => $(wc -l $target-riddler_domains.txt|awk '{ print $1}')" 75 | #dnsdumpster 76 | cmdtoken=$(curl -ILs https://dnsdumpster.com | grep csrftoken | cut -d " " -f2 | cut -d "=" -f2 | tr -d ";") 77 | curl -s --header "Host:dnsdumpster.com" --referer https://dnsdumpster.com --user-agent "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0" --data "csrfmiddlewaretoken=$cmdtoken&targetip=$target" --cookie "csrftoken=$cmdtoken; _ga=GA1.2.1737013576.1458811829; _gat=1" https://dnsdumpster.com > dnsdumpster.html 78 | cat dnsdumpster.html|grep "https://api.hackertarget.com/httpheaders"|grep -o "\w.*$target"|cut -d "/" -f7|sort -u > $target-dnsdumper_domains.txt 79 | rm dnsdumpster.html 80 | [ "$silent" == False ] && echo "[$right] Dnsdumpster Over => $(wc -l $target-dnsdumper_domains.txt|awk '{ print $1}')" 81 | #rapiddns 82 | curl -s "https://rapiddns.io/subdomain/$target?full=1#result" | grep -oaEi "https?://[^\"\\'> ]+" | grep $target | cut -d "/" -f3 | sort -u >$target-rapiddns_domains.txt 83 | [ "$silent" == False ] && echo "[$right] Rapiddns Over => $(wc -l $target-rapiddns_domains.txt|awk '{ print $1}')" 84 | #choas 85 | org=$(echo $target | cut -d. -f1) 86 | curl -sSfL "https://chaos-data.projectdiscovery.io/index.json" | grep "URL" | sed 's/"URL": "//;s/",//' | grep "$org" | while read host do;do curl -sSfL "$host" > /dev/null;done && for i in `ls -1 | grep .zip$`; do unzip $i > /dev/null; done && rm -f *.zip && cat $org*.txt > $target-choas_domains.txt 87 | [ "$silent" == False ] && echo "[$right] Choas Over => $(wc -l $target-choas_domains.txt|awk '{ print $1}')" 88 | 89 | sort -u *_domains.txt -o subdomains.txt 90 | cat subdomains.txt | rev | cut -d . -f 1-3 | rev | sort -u | grep -v '^[[:blank:]]*$' > root_subdomains.txt 91 | xargs -a subdomains.txt -I@ -P500 sh -c 'shuffledns -d "@" -silent -w ../../lists/words.txt -r ../../lists/resolvers.txt' > shuff-dns.txt 92 | [ "$silent" == False ] && echo "[$right] permutations, mutations, alterations Over => $(wc -l shuff-dns.txt | awk '{ print $1}')" 93 | find . -type f -name "*.txt" -not -name 'subdomains.txt' -not -name 'root_subdomains.txt' -not -name 'shuff-dns.txt' -delete 94 | 95 | } 96 | 97 | get_alive() { 98 | [ "$silent" == False ] && echo -e ">> \e[36mAlive Domain Filteration\e[0m is in progress" 99 | cat *.txt | sort -u > raw-domains.txt 100 | cat raw-domains.txt | httpx -ports 80,443,81,8443,8080,8000,10000,9000 -silent -threads 1000 | tee -a alive.txt 101 | [ "$silent" == False ] && echo -e "[$right]"$bold"Done.💀"$end 102 | [ "$silent" == False ] && echo -e ">> \e[36mAlive Filteration JSON\e[0m is in progress" 103 | cat alive.txt | python3 -c "import sys; import json; print (json.dumps({'domains':list(sys.stdin)}))" >alive.json 104 | [ "$silent" == False ] && echo -e "[$right]"$bold"Done.💀"$end 105 | find . -type f -name "*.txt" -not -name 'alive.txt' -not -name 'alive.json' -delete 106 | } 107 | target=False 108 | silent=False 109 | list=( 110 | banner 111 | get_subzzZ 112 | get_alive 113 | ) 114 | while [ -n "$1" ]; do 115 | case "$1" in 116 | -d | --domain) 117 | target=$2 118 | shift 119 | ;; 120 | -s | --silent) 121 | silent=True ;; 122 | *) echo -e $red"[-]"$end "Unknown Option: $1" 123 | Usage 124 | ;; 125 | esac 126 | shift 127 | done 128 | [[ $target == "False" ]] && { 129 | echo -e $red"[-]"$end "Argument: ./subzzZ [-d/--domain] required" 130 | Usage 131 | } 132 | ( 133 | banner 134 | get_subzzZ 135 | get_alive 136 | ) 137 | --------------------------------------------------------------------------------