RomanNum3ral
/
Sublist3r
mirror of https://github.com/aboul3la/Sublist3r.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' of https://github.com/fleetcaptain/Turbolist3r

This commit is contained in:
fleetcaptain 2019-03-16 18:54:32 -07:00
parent 228071832d bd1970c5c2
commit 7f786398ea
1 changed files with 15 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
README.md
View File

@ -1,14 +1,14 @@
## Turbolist3r - Beta ## Turbolist3r
Turbolist3r is a fork of the [sublist3r](https://github.com/aboul3la/sublist3r) subdomain discovery tool. In addition to all original OSINT capabilties of sublist3r, turbolist3r automates some of the results analysis, with a focus on subdomain takeover. Turbolist3r is a fork of the [sublist3r](https://github.com/aboul3la/sublist3r) subdomain discovery tool. In addition to the original OSINT capabilties of sublist3r, turbolist3r automates some analysis of the results, with a focus on subdomain takeover.
Turbolist3r queries public DNS servers for each discovered subdomain. If the subdomain exists (i.e. the resolver replied with an address), the answer is categorized as CNAME or A record. By examining A records, it is possible to discover potential penetration testing targets for a given domain. Likewise, the process of looking for subdomain takeovers is simple; view the discovered CNAME records and investigate any that point to applicable cloud services. Turbolist3r queries public DNS servers for each discovered subdomain. If the subdomain exists (i.e. the resolver replied with an address), the answer is categorized as CNAME or A record. By examining A records, it is possible to discover potential penetration testing targets for a given domain. Likewise, the process of looking for subdomain takeovers is simple; view the discovered CNAME records and investigate any that point to applicable cloud services.
This is an early release and may contain bugs or other irregularities. Please do not use for illegal purposes.
## Screenshots ## Screenshots
![Screenshot 1](https://cp270.files.wordpress.com/2018/01/turbo_home.png) ![Screenshot 1](https://cp270.files.wordpress.com/2019/01/turbo-lister.png)
![Screenshot 2](https://cp270.files.wordpress.com/2018/01/turbo_analysis.png) ![Screenshot 2](https://cp270.files.wordpress.com/2018/01/turbo_analysis.png)
@ -24,19 +24,25 @@ Short Form | Long Form | Description
-e | --engines | Specify a comma-separated list of search engines -e | --engines | Specify a comma-separated list of search engines
-o | --output | Save discovered domain names to specified text file -o | --output | Save discovered domain names to specified text file
-h | --help | show the help message and exit -h | --help | show the help message and exit
-a | --analysis | Do analysis of the results and save to specified text file -a | --analyze | Do reverse DNS analysis and output results
(none) | --saverdns | Save reverse DNS analysis to specified file
(none) | --inputfile | Read domains from specified file, and use them for analysis
(none) | --debug | Print debug information during the analysis module (-a). Prints mostly raw DNS data, familarity with the DIG Linux DNS utility and it's output is helpful to interpret the debug output (none) | --debug | Print debug information during the analysis module (-a). Prints mostly raw DNS data, familarity with the DIG Linux DNS utility and it's output is helpful to interpret the debug output
### Examples ### Examples
* To enumerate subdomains of a specific domain, perform turbolist3r analysis, and save the analysis to a file:
``python turbolist3r.py -d example.com -a analysis_file.txt``
* To list all the basic options and switches use -h switch: * To list all the basic options and switches use -h switch:
```python turbolist3r.py -h``` ```python turbolist3r.py -h```
* To enumerate subdomains of a specific domain, perform advanced analysis, and save the analysis to a file:
``python turbolist3r.py -d example.com -a --saverdns analysis_file.txt``
* Read subdomains from a file and perform advanced analysis on them:
``python turbolist3r.py -d example.com -a --inputfile subdomains.txt``
* To enumerate subdomains of specific domain: * To enumerate subdomains of specific domain:
``python turbolist3r.py -d example.com`` ``python turbolist3r.py -d example.com``