search

jarun / googler

:mag: Google from the terminal
GNU General Public License v3.0
6.08k stars 529 forks source link

subdomains #297

Closed Sy3Omda closed 4 years ago

Sy3Omda commented 4 years ago

Hi, First of all thx for this great tool, my Q is it possible to recon all subdomains for certain site using this tool because i tried but it only response with few results rather than all subdomains listed when using google search.

Thx

jarun commented 4 years ago

Please share the comma d you ran and wht you expect.

Sy3Omda commented 4 years ago

sorry i can not understand you if you asking about the result i want ! it would be something like www.site.com stg.site.com test.test.site.com dev.site.com anything.anything.site.com

jarun commented 4 years ago

Sorry about the typo. Please share the complete commnd you ran.

Sy3Omda commented 4 years ago

okay googler -n100 yahoo.com --json | grep "\"url\""|tr -s ' ' |cut -d ' ' -f3|tr -d "\"" | awk -F/ '{print $3}' | grep -i "yahoo.com"

jarun commented 4 years ago

Sorry, I don't understand your use case. If you search yahoo.com in google web search it doesn't return subdomains.

jarun commented 4 years ago

In general, there is no subdomain-specific handling in googler.

zmwangx commented 4 years ago

Going through some old issues here to get up to speed after a hiatus, so excuse me for replying on a long-closed issue.

What you were trying to do is "subdomain enumeration." Search for this topic and you'll find many guides; googler could play a small part in it but there are many other arguably more useful techniques. I recall enjoying this particular blog post back when it came out: https://blog.appsecco.com/a-penetration-testers-guide-to-sub-domain-enumeration-7d842d5570f6 I also just found appsecco/the-art-of-subdomain-enumeration but I'm not sure how good it is.

Sy3Omda commented 4 years ago

@zmwangx THANK you so much, that`s helpful. i was trying to make use of this such amazing tool in addition to my arsenal tools.