SubCat

alt text alt text alt text

Fast subdomain enumeration tool.

Features • Install • Usage • Running SubCat

Features

Screen Shot 2022-05-18 at 12 40 02 PM

  • Fast and powerful resolution and wildcard elimination module
  • Curated passive sources to maximize results
  • Optimized for speed, very fast and lightweight on resources
  • STDIN/OUT support for integrating in workflows
  • Scope limitation based on given IP ranges list

Install

# Linux, Windows, MacOS
pip3 install -r requirements.txt

Usage

duty@f:~$ python3 subcat.py -h

This will display help for the tool. Here are all the switches it supports.

Flags:
INPUT:
   -d --domain string  domains to find subdomains for
   -l string[] | stdin  list of domains to find subdomains for
   --scope string Show only in cope

OUTPUT:
   -sc, --status-code string       Show response status code
   -nip --no-ip       Do not respolve IP
   
CONFIG:
   -t --threads       Number of threads used

DEBUG:
   -v        show verbose output

Running SubCat

cat domains | python3 subcat.py

python3 subcat.py -d hackerone.com


 
	                      ;            ;                  
	                    ρββΚ          ;ββΝ                
	                  έΆχββββββββββββββββββΒ              
	                ;ΣΆχΜ΅΅ΫΝββββββββ Ϋ΅΅ΫβββΝ            
	               όΆΆχβ   Ά   ββββ΅  Ά΅  βββββ           
	              χΆΆΆφβΒ; Ϋ΅;έββββΒ; Ϋ΅ ρββββββ          
	              ΆΆΆΆδβββββββββ;χββββββμβββββββ          
	              ΪχχχχΧβββββββββββββββββββθθθθΚ          
	             ·ϊβθβζ  Ϊθθβββββββββββββββμ ;όβΫ΅        
	              ·΅   ΅ΫΫΫΆΆθβββββββββθθΫ΅   ΅Ϋ΅         
	                      ;ΣΆθββββΒΝρρρμ                  
	                     ;ΣΆΆβββββββββββμ
	 ▄∞∞∞∞∞▄, ╒∞∞▄   ∞∞▄ ▄∞∞∞∞∞∞▄   ,▄∞∞∞∞▄      ▄∞∞4▄  ╒∞∞∞∞∞∞∞▄,
	▐▄ ═▄▄▄ ▐█▐ ,▀  j' █▌█  ▄▄▄ ▀█▌█▀ ╓▄▄  ▀▄  ¡█  , ▐█ ▐▄▄▄  ▄▄██
	▐▄ `'""▀██▐  █▌ j  █▌█  `"" ▄█▌█ ▐█▀`▀▄██' M  $██  █, `█ ▐█```
	j▀▀███▌ ▐█▐  ▀▌▄█  ▀▀█ ▐███  █▌▄ ▀█▄▄▀ ▐█M▀.       ▀█▄.▀ J▀
	╚▄,,¬¬⌐▄█▌ ▀▄,,, ▄██ █,,,,,▓██▌ ▀▄,,,,▄█╩j▌,██▀▀▀▀▌,█▌`█,▐█
	  ▀▀▀▀▀▀▀    ▀▀▀▀▀▀ ""▀▀▀▀▀▀      ▀▀▀""`  ▀▀▀     ▀▀▀   ▀▀▀
	               ΅qΆΆΆΆββ V1.0@duty1g ββββββΡ΅  
	                  ΫθΆΆΆββββββββββββββββΡ΅         
	                      ΅ΫΫΫΫΝNNΝΫΫΫΐ΅΅                          
	                            

[12:37:13] [INFO]: extracted subdomains : 14  

docs.hackerone.com 185.199.111.153
support.hackerone.com 104.16.51.111
3d.hackerone.com 0.0.0.0
mta-sts.forwarding.hackerone.com 185.199.110.153
api.hackerone.com 104.16.99.52
www.hackerone.com 104.16.99.52
events.hackerone.com 0.0.0.0
a.ns.hackerone.com 162.159.0.31
b.ns.hackerone.com 162.159.1.31
resources.hackerone.com 3.98.63.202
mta-sts.managed.hackerone.com 185.199.111.153
gslink.hackerone.com 13.224.226.45
mta-sts.hackerone.com 185.199.111.153
hackerone.com 104.16.99.52

To run the tool on a target, just use the following command.

License

SubCat is made with 🖤 by duty1g

GitHub

View Github