• Stars
    star
    663
  • Rank 67,991 (Top 2 %)
  • Language
    Go
  • License
    MIT License
  • Created over 4 years ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Find subdomains on GitHub.

github-subdomains

Find subdomains on GitHub.

go badge MIT license badge twitter badge


Description

This Go tool performs searches on GitHub and parses the results to find subdomains of a given domain.

Install

go install github.com/gwen001/github-subdomains@latest

or

git clone https://github.com/gwen001/github-subdomains
cd github-subdomains
go install

Usage

$ github-subdomains -h

Usage of github-subdomains:
  -d string
    	domain you are looking for (required)
  -e	extended mode, also look for <dummy>example.<tld>
  -k	exit the program when all tokens have been disabled
  -o string
    	output file, default: <domain>.txt
  -raw
    	raw output
  -t string
    	github token (required), can be:
    	  • a single token
    	  • a list of tokens separated by comma
    	  • a file (.tokens) containing 1 token per line
    	if the options is not provided, the environment variable GITHUB_TOKEN is readed, it can be:
    	  • a single token
    	  • a list of tokens separated by comma

If you want to use multiple tokens, you better create a .tokens file in the executable directory with 1 token per line

token1
token2
...

or use an environment variable with tokens separated by comma:

export GITHUB_TOKEN=token1,token2...

Tokens are disabled when GitHub raises a rate limit alert, however they are re-enable 1mn later. You can disable that feature by using the option -k.

Todo

  • change the order of the extra searches ?
  • ?

Changelog

20/09/2022

  • fix regexp for subdomains

25/09/2020

  • quick mode added
  • tokens can be read from any file

23/09/2020

  • fixed an issue in the api call (params name)
  • added binary

12/08/2020

  • improved clean function

06/08/2020

  • max_page set forced to 10 to save 1 request for every search
  • new banner (easier to maintain)
  • removed _ from the regexps
  • extended regexp fixed
  • improved cleaning function

05/08/2020

  • added an option to exit the program when all tokens have been disabled instead of waiting
  • rate limited tokens are disabled for 1mn then re-enabled
  • removed options for languages and noise
  • better page management
  • panic errors handled

04/08/2020

  • moved default languages and noise to source code
  • added an option for languages and noise
  • bug fixed in searches with language and noise (empty keyword)
  • added search signature to avoid duplicate searches with noise
  • file loading rewritten
  • preview image added

03/08/2020

  • fixed delay changed 100 -> 200
  • removed useless debug messages

Feel free to open an issue if you have any problem with the script.

More Repositories

1

pentest-tools

A collection of custom security tools for quick needs.
Python
2,971
star
2

github-search

A collection of tools to perform searches on GitHub.
Python
1,233
star
3

s3-buckets-finder

Find AWS S3 buckets and test their permissions.
PHP
353
star
4

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.
Python
258
star
5

BB-datas

Tools and datas related to Bug Bounty.
PHP
225
star
6

github-endpoints

Find endpoints on GitHub.
Go
184
star
7

offsectools_www

A vast collection of security tools and resources curated by the community.
HTML
177
star
8

DataExtractor

A Burp Suite extension to extract datas from source code while browsing.
Python
136
star
9

related-domains

Find related domains of a given domain.
Python
84
star
10

dnspy

Find subdomains and takeovers.
Python
83
star
11

vhost-brute

A PHP tool to brute force vhost configured on a server.
PHP
78
star
12

actarus

Actarus is a custom tool for bug bounty
HTML
76
star
13

bugbountytips

Webapp to search tips on Twitter through #bugbountytips
CSS
67
star
14

github-regexp

Basically a regexp over a GitHub search.
Go
61
star
15

gitlab-subdomains

Find subdomains on GitLab.
Go
60
star
16

myrecon.py

My recon script
Python
52
star
17

keyhacks.sh

Automation of tokens/api keys testing.
Shell
48
star
18

google-search

Returns results from Google search.
Python
43
star
19

bxss

Alternative to XSS Hunter for blind XSS.
PHP
40
star
20

BBstats

Bug Bounty statistics tool.
PHP
30
star
21

BBvuln

A listing of the most common vuln that you can link in your PoCs
25
star
22

testxss

PHP tool to test XSS
PHP
22
star
23

favicon-hashtrick

Python script implementing the favicon hash trick to find subdomains.
Python
22
star
24

detectify-cves

Find CVEs that don't have a Detectify modules.
Python
20
star
25

csp-analyzer

Analyze Content-Security-Policy header of a given URL.
Python
15
star
26

gitgrep

Webapp to perform regexp search over GitHub search.
PHP
14
star
27

dnsexpire

Test domain expiration dates.
PHP
13
star
28

apk-analyzer

Analyze an APK archive.
Python
13
star
29

extract-endpoints

Extract endpoints from source files.
PHP
11
star
30

urlgrabber

PHP tool to grab urls of a specific site.
PHP
11
star
31

gitpillage

Extract data from a .git directory.
Python
10
star
32

shotTheWorld

PHP tool that takes screenshots of a given ips/ports combo list and then try to guess the service.
PHP
9
star
33

graphql-introspection-analyzer

Graphql introspection query analyzer.
Python
8
star
34

php-stegano-lsb

Hide file using Least Significant bits method.
PHP
7
star
35

testidor

PHP tool to test IDOR
PHP
6
star
36

dotfiles

me dotfiles
Shell
6
star
37

3rdparty-services

PHP tool to test 3rd party service validity
PHP
6
star
38

gwen001

6
star
39

autoknoxss

Custom PHP tool to automate calls to KNOXSS
PHP
6
star
40

act_custom

Custom scripts for Actarus
PHP
5
star
41

testcrlf

PHP tool to test CRLF
PHP
5
star
42

icmp-send-file

send file with ping
Shell
4
star
43

ipsites

PHP tool to find websites hosted by a given ip
PHP
4
star
44

thegarden

Vulnerable web application made with Laravel.
JavaScript
4
star
45

testcors

PHP tool to test CORS
PHP
3
star
46

testionion

PHP script to find onion websites
PHP
3
star
47

10degres.net_jenkins

http://10degres.net
HTML
3
star
48

testcsrf

PHP tool to test CSRF
PHP
3
star
49

ultimate-open-redirect

PHP tool to test open redirect
PHP
3
star
50

testssrf

PHP tool to test SSRF
PHP
3
star
51

MyPhpDirb

GoBuster like written in PHP
PHP
2
star
52

setricks

Small search engine tool usefull to find the position of a given website
PHP
2
star
53

gwen001.github.io

Silence is golden.
Go
2
star
54

testgo

my golang test
Go
1
star
55

poc_subto

JavaScript
1
star
56

github-stargizer

View stars evolution of GitHub repositories.
PHP
1
star