First of all thanks for this project, it looks like it's finding sub-domains that Amass isn't finding which is great! I have a suggestion to improve this project.
I've run github-subdomains with -d paypal.com argument and noticed that it uses "paypal.com" GitHub search query and scrapes first 1000 results (10 pages by 100 results each). Then I've used this query in https://github.com and noticed that most of these results are www.paypal.com or paypal.com:
We can exclude these uninteresting results using NOT keyword get more subdomains:
So I suggest to use "example.com" NOT "https://example.com" NOT "http://example.com" NOT "www.example.com" query instead of "example.com".
Hi @gwen001 ,
First of all thanks for this project, it looks like it's finding sub-domains that Amass isn't finding which is great! I have a suggestion to improve this project.
I've run github-subdomains with
-d paypal.com
argument and noticed that it uses"paypal.com"
GitHub search query and scrapes first 1000 results (10 pages by 100 results each). Then I've used this query in https://github.com and noticed that most of these results arewww.paypal.com
orpaypal.com
:We can exclude these uninteresting results using
NOT
keyword get more subdomains:So I suggest to use
"example.com" NOT "https://example.com" NOT "http://example.com" NOT "www.example.com"
query instead of"example.com"
.