obsec open source tools #recon #obsec #sub

 Sub-domains Discovery

• Brute force on main domain
• Some scripts to automate this task
– Knockpy:-
https://github.com/guelfoweb/knock
– Sublist3r:-
https://github.com/aboul3la/Sublist3r
– SubBrute
https://github.com/TheRook/subbrute

 

_ _ _

Sub-domains Discovery

Knockpy
• Usage: ./knockpy target.com

_ _ _ 

 

Sub-domains Discovery

Sublist3r

• Usage: python sublist3r.py -d target.com

 

_ _ _ 

 

Sub-domains Discovery

Sublist3r Cont.

• Find sub-domains with specific open ports
• Usage: python sublist3r.py -d target.com -p 80,443

 

 

Sub-domains Discovery

SubBrute.

• Usage: ./subbrute.py google.com

• You can give list of domains like this
Usage: ./subbrute.py -t list.txt