search

r3curs1v3-pr0xy / sub404

A python tool to check subdomain takeover vulnerability
GNU General Public License v3.0
328 stars 61 forks source link

i got doubts #9

Open MaxArthurQueen opened 3 years ago

MaxArthurQueen commented 3 years ago

Hi guys! Thanks a lot for your work But I have an issue... I run under py3.7 and have a list of subdomains I extracted myself from the internet. It's a very big list (93000subdomains) and I don't know if it may be for that reason, but sub404 told me that it checked all the subdomains without finding any weakness... and I really have doubts about it. The work lasted less than 1 little minute Sub404 .

BobbyJohansen commented 2 years ago

Mee too.

ob1lan commented 1 year ago

This tool isn't working (anymore). I feed it a URL that had a CNAME pointing to a non-existent bucket, and it didn't flag it as vulnerable. Manually browser the URL gets the usual "404 Not Found Code: NoSuchBucket".

This is a bummer, as I intended to use this tool to search for Subdomain Takeover via Abandoned Amazon S3 Bucket.