search

harsh-bothra / Bheem

365 stars 157 forks source link

subdomains also included in urls by waybackurls in extractor.sh #20

Open swajyadip1997 opened 3 years ago

swajyadip1997 commented 3 years ago

To do not include subdomains of targets in waybackurls "-no-subs" flag need to use. The resulting command will be " waybackurls -no-subs $1 "

Selection_006

harsh-bothra commented 3 years ago

Hi, While extracting the URLs from Wayback and gau we are considering subdomains as well to automate further for XSS and other automation workflows. Do you have any specific reason why it's not a good idea to include subdomains?

swajyadip1997 commented 3 years ago

Sometime the subdomains included are not owned by targets, sometimes it gives false positive and also possible of going out of scope.

swajyadip1997 commented 3 years ago

False positive in sense they do not resolved

swajyadip1997 commented 3 years ago

One suggestion , we can run extractor.sh for all in scope subdomains.