search

haccer / subjack

Subdomain Takeover tool written in Go
Apache License 2.0
1.91k stars 337 forks source link

scan.io results #2

Closed random-robbie closed 6 years ago

random-robbie commented 6 years ago

Hi Dude,

Is there a way we can add the original subdomain to match the domain that can be hijacked.

i've got all the s3 buckets but it's hard to match them up to subdomains.

Could the output be a CSV where one col is subdomain the next type and the next the source i.e bucket

haccer commented 6 years ago

Sorry I’m a little confused by what you’re suggesting, but I think your proposal goes out-of-bounds for what that script is intended for.

The scanio.sh script was just a proof-of-concept of how someone could gather a list of domains using data from Rapid7’s Project Sonar to test with subjack. To keep things fair, it’s entirely up to you to parse that data how you wish, make modifications, or use another data source.