search

SolomonSklash / chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
https://www.solomonsklash.io/chomp-scan-update.html
GNU General Public License v3.0
393 stars 76 forks source link

Option to pass user input subdomains #33

Open gopinath6 opened 5 years ago

gopinath6 commented 5 years ago

Skipping subdomain enumeration and proceed next steps with user input subdomain list. for eg: If i want to scan only known 10 subdomain for content/info discovery, and next steps.Is it possible to give this file and proceed further?Is it possible?

SolomonSklash commented 5 years ago

Let me look into this.

securibee commented 5 years ago

I'm interested in the latter part as well.

Currently I'm involved with several domains that allow custom user subdomains, e.g. john.website.com, bob.website.com. These, as you can imagine, cause for a lot of noise.

After subdomain enumeration is done I'd like to manually sift through the results and perform next steps on the ones of my choosing instead of automated as it includes all the user defined subdomains which are essentially all the same and can go up in the thousands.

This way I can filter the subdomains found in the enumeration and pass that into the content/info discovery, e.g. admin.website.com, dev.website.com, sales.website.com