search

gwen001 / offsectools_www

A vast collection of security tools and resources curated by the community.
https://offsec.tools
176 stars 23 forks source link

[addtool] Turbolist3r #204

Closed gwen001 closed 1 year ago

gwen001 commented 1 year ago

[link]https://github.com/fleetcaptain/Turbolist3r[/link] [short_descr]Subdomain enumeration tool with analysis features for discovered domains.[/short_descr] [tags]subdomains[/tags] [long_descr]Turbolist3r is a fork of the sublist3r subdomain discovery tool. In addition to the original OSINT capabilties of sublist3r, turbolist3r automates some analysis of the results, with a focus on subdomain takeover.

Turbolist3r queries public DNS servers for each discovered subdomain. If the subdomain exists (i.e. the resolver replied with an address), the answer is categorized as CNAME or A record. By examining A records, it is possible to discover potential penetration testing targets for a given domain. Likewise, the process of looking for subdomain takeovers is simple; view the discovered CNAME records and investigate any that point to applicable cloud services.[/long_descr] 68747470733a2f2f63703237302e66696c65732e776f726470726573732e636f6d2f323031392f30312f747572626f2d6c69737465722e706e67

gwen001 commented 1 year ago

Issue correctly handled, tool is waiting for human validation.

gwen001 commented 1 year ago

Tool has been accepted: https://offsec.tools/tool/turbolist3r

Thank you!