• Stars
    star
    173
  • Rank 220,124 (Top 5 %)
  • Language
    Go
  • License
    GNU General Publi...
  • Created over 7 years ago
  • Updated over 2 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Use ExpiredDomains.net and BlueCoat to find useful domains for red team.

AIRMASTER

(Thanks NSA Name-O-Matic for the name)

Installation

macOS

  1. Install homebrew
  2. In your terminal, run brew install tesseract
  3. Build Go project or download a release
  4. Copy the configuration found in the Config section and place it in ~/.AIRMASTER.json

How to use

Listing domain names

A good way to get a domain list is registering for ExpiredDomains and using the Export .COM feature.

If you want to get a domain with specific keywords, you can use the keywords feature. This will take a bit longer and have less results, but it can still work extremely well.

  1. With a domain list file

AIRMASTER list --file ./path/to/file.txt

  1. With keywords

AIRMASTER list --keyword max --keyword cool

If multiple keywords are specified, they are combined by AND, so in the example above, you will get maxiscool.com, max-is-kinda-cool.com, cool-memes-to-the-max.com

Purchasing domain names

Purchasing domain names uses the domains found by listing domains (see above) and adds an extra step to allow you to purchase the domain name. This is very simple: just add the --purchase flag to the end of a list command

Example:

AIRMASTER list --file ./path/to/file.txt --purchase

max@seldon ~> AIRMASTER list --file ~/Downloads/domains_2017-08-01_16_07_03.txt --purchase
Using config file: /Users/max/.AIRMASTER.json
Found available domain pavpal-login-account.com (Phishing)
-1. Do not purchase
0. Purchase with GoDaddy for $7490000
Choose an option: 0
Success!

Another way to purchase domains is actually to use output from the list command. This is useful if you want to leave AIRMASTER alone for a while while you grab a coffee, or while you're reading documentation on Windows Me because your target is using that for some reason.

AIRMASTER list --file ~/Downloads/domains.txt > /tmp/available

*20 minuites later* - Edit list from /tmp/available as you'd like to

AIRMASTER purchase --list /tmp/available

The help should be obvious, so if you are stuck, try using AIRMASTER --help. (Although if you are still stuck, please create an issue)

Config

You can access the configuration by editing the ~/.AIRMASTER.json file.

The options are:

  • (*) user - Used for whois data
    • first - Your first name
    • middle - Your middle name
    • last - Your last name
    • organization - Organization that you belong to
    • title - Title at organization
    • email - Email for contact
    • phone - Phone number (format: +[country_code].XXXXXXXXXX. Ex: +1.9999999999)
    • fax - Fax number
    • address
    • city
    • postal
    • country_code - ISO "Alpha 2 Code"
  • godaddy - Godaddy configuration
    • godaddyKey
    • godaddySecret
  • namecheap - Namecheap configuration (Not built yet!)
    • namecheapUser
    • namecheapKey
    • namecheapUsername
  • file - Sets location for file to check domains from
  • keyword - Set keywords

(*) is required

Example Config

Before anyone freaks out, the API key is a test key taken from the GoDaddy docs

{
    "godaddyKey": "UzQxLikm_46KxDFnbjN7cQjmw6wocia",
    "godaddySecret": "46L26ydpkwMaKZV6uVdDWe",
    "first": "Max",
    "last": "Harley",
    "organization": "Max Co.",
    "title": "CEO",
    "email": "[email protected]",
    "phone": "+1.9999999",
    "address": "1 Awesome Dr.",
    "city": "Charleston",
    "state": "SC",
    "postal": "2946X",
    "country_code": "US"
}

More Repositories

1

satellite

easy-to-use payload hosting
Go
258
star
2

gophish-notifier

Notification webhook for GoPhish
Go
48
star
3

adexplorersnapshot-rs

Rust
45
star
4

sddl_py

Parse SDDL strings
Python
34
star
5

nmap

Golang wrapper library for nmap.
Go
24
star
6

ansible-role-mythic

Ansible role that Installs Mythic
13
star
7

haskell-nmap

Nmap results are a semigroup
Haskell
13
star
8

Recon-ng_Reddit

Reddit domain search module for Recon-ng
Python
11
star
9

ctfnmap

An easy way to manage nmap scans during a CTF
Go
10
star
10

homebrew-security

Just for some security tools I am making since HomeBrew doesn't like non-popular tools
Ruby
9
star
11

zybook

Solves zybooks answers
Python
8
star
12

go-czds

ICANN CZDS zone file API
Go
4
star
13

polymorphic_compression_malware

Warning, this is malware. Don't do something stupid with it
Go
4
star
14

log

Logbook tool for capturing important thoughts
Haskell
3
star
15

mwnn

IRC, but with privacy - Also a way to help me learn Go
Go
3
star
16

discord-binanalyze

Read binaries from Discord and perform static analysis on it.
Python
3
star
17

git-fuck

Implementation of `git-fuck`
Shell
2
star
18

brute

Yet Another Bruteforcer... but written in Go
Go
2
star
19

transloc

Helper library to help me catch my bus. I hate busses
Go
2
star
20

scrape_telnet_password

Scrapes telnet password from pcap files
Shell
2
star
21

tcpflagobfuscate

Hide data in TCP flags
Go
2
star
22

shadow

Shadow file parser
C++
1
star
23

haskell-seatbelt

Seatbelt for Linux
Haskell
1
star
24

dna

A documentation platform for any project
Go
1
star
25

vt

VirusTotal hash checker using stdin
Python
1
star
26

pwdquery

Stores passwords
Python
1
star
27

alphavantage

API Wrapper for https://www.alphavantage.co/
Go
1
star
28

discord-router

Router decorator for Discord.py messages
Python
1
star
29

t94j0.github.io

HTML
1
star
30

ghidra-k8s

Ghidra server on Kubernetes
Smarty
1
star