Sublist3r
  • CHS
  • 29th Jul 2018
  • About Sublist3r

    Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu, and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster, and ReverseDNS.

    subbrute was integrated with Sublist3r to increase the possibility of finding more subdomains using bruteforce with an improved wordlist. The credit goes to TheRook who is the author of subbrute.

    Installation

    git clone https://github.com/aboul3la/Sublist3r.git

    Recommended Python Version:

    Sublist3r currently supports Python 2 and Python 3.

    • The recommended version for Python 2 is 2.7.x
    • The recommened version for Python 3 is 3.4.x

    Dependencies:

    Sublist3r depends on the requests, dnspython, and argparse python modules.

    These dependencies can be installed using the requirements file:

    • Installation on Windows:
    c:\python27\python.exe -m pip install -r requirements.txt
    • Installation on Linux
    sudo pip install -r requirements.txt

    Alternatively, each module can be installed independently as shown below.

    Requests Module (http://docs.python-requests.org/en/latest/)

    • Install for Windows:
    c:\python27\python.exe -m pip install requests
    • Install for Ubuntu/Debian:
    sudo apt-get install python-requests
    • Install for Centos/Redhat:
    sudo yum install python-requests
    • Install using pip on Linux:
    sudo pip install requests

    dnspython Module (http://www.dnspython.org/)

    • Install for Windows:
    c:\python27\python.exe -m pip install dnspython
    • Install for Ubuntu/Debian:
    sudo apt-get install python-dnspython
    • Install using pip:
    sudo pip install dnspython

    argparse Module

    • Install for Ubuntu/Debian:
    sudo apt-get install python-argparse
    • Install for Centos/Redhat:
    sudo yum install python-argparse

    • Install using pip:
    sudo pip install argparse

    for coloring in windows install the following libraries

    c:\python27\python.exe -m pip install win_unicode_console colorama 

    Usage


    Examples

    ./sublist3r -d example.com //uses all the search engines
    ./sublist3r -d example.com -e bing  //uses only bing to enumerate subdomains
    ./sublist3r -d example.com -t 10 //change the no.of threads
    ./sublist3r -d example.com -v //enables verbose scan

    concatinate different arguments to narrow get the desired out put

    Credits

    • TheRook - The bruteforce module was based on his script subbrute.
    • Bitquark - The Subbrute's wordlist was based on his research dnspop.

    Thanks

    • Special Thanks to Ibrahim Mosaad for his great contributions that helped in improving the tool.

    Version

    Current version is 1.0

    CHS

    Got this content from the sublist3r repo I found it quite self explinatory so I just modified it slightly and posted it here