https://transparencyreport.google.com/transparencyreport/api/v3/httpsreport/ct/certsearch/page?p=google.com
https://transparencyreport.google.com/transparencyreport/api/v3/httpsreport/ct/certsearch?include_expired=true&include_subdomains=true&domain=
https://www.google.com/transparencyreport/api/v3/httpsreport/ct/certsearch?domain=

In the readme file, its mentioned that several subdomains which resolve to single IP Address would then classify.

https://www.robtex.com/dns-lookup/google.com

how to resolve this issue?

• Warning: require cf-check but it's is not installed.Trying to setup pkg_cf-check
  cp: missing destination file operand after '/usr/local/bin/'

https://github.com/subfinder/subfinder/blob/master/libsubfinder/sources/passivetotal/passivetotal.go

//
// Written By : @ice3man (Nizamul Rana)
//
// Distributed Under MIT License
// Copyrights (C) 2018 Ice3man
//

// Package passivetotal is a golang client for Passive total Subdomain Discovery
package passivetotal

import (
	"bytes"
	"encoding/json"
	"fmt"
	"io/ioutil"
	"net/http"

	"github.com/subfinder/subfinder/libsubfinder/helper"
)

type passivetotalObject struct {
	Subdomains []string `json:"subdomains"`
}

var passivetotalData passivetotalObject

// all subdomains found
var subdomains []string

// Query function returns all subdomains found using the service.
func Query(args ...interface{}) interface{} {

	domain := args[0].(string)
	state := args[1].(*helper.State)

	// Get credentials for performing HTTP Basic Auth
	username := state.ConfigState.PassivetotalUsername
	key := state.ConfigState.PassivetotalKey

	if username == "" || key == "" {
		return subdomains
	}

	// Create JSON Get body
	var request = []byte(`{"query":"` + domain + `"}`)

	client := &http.Client{}
	req, err := http.NewRequest("GET", "https://api.passivetotal.org/v2/enrichment/subdomains", bytes.NewBuffer(request))
	if err != nil {
		if !state.Silent {
			fmt.Printf("\npassivetotal: %v\n", err)
		}
		return subdomains
	}

	req.SetBasicAuth(username, key)

	// Set content type as application/json
	req.Header.Set("Content-Type", "application/json")

	resp, err := client.Do(req)
	if err != nil {
		if !state.Silent {
			fmt.Printf("\npassivetotal: %v\n", err)
		}
		return subdomains
	}

	// Get the response body
	body, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		if !state.Silent {
			fmt.Printf("\npassivetotal: %v\n", err)
		}
		return subdomains
	}

	// Decode the json format
	err = json.Unmarshal([]byte(body), &passivetotalData)
	if err != nil {
		if !state.Silent {
			fmt.Printf("\npassivetotal: %v\n", err)
		}
		return subdomains
	}

	// Append each subdomain found to subdomains array
	for _, subdomain := range passivetotalData.Subdomains {
		finalSubdomain := subdomain + "." + domain

		if state.Verbose == true {
			if state.Color == true {
				fmt.Printf("\n[%sPASSIVETOTAL%s] %s", helper.Red, helper.Reset, finalSubdomain)
			} else {
				fmt.Printf("\n[PASSIVETOTAL] %s", finalSubdomain)
			}
		}

		subdomains = append(subdomains, finalSubdomain)
	}

	return subdomains
}

https://www.alienvault.com/documentation/api/usm-anywhere-api.htm#usm-anywhere%E2%84%A2-api

https://rapidapi.com/raygorodskij/api/AlienVault/details

I'm getting this message

Invalid: Unknown option -e

Ask, Baidu, Bing, DNSDumpster, DNSTable, Dogpile, Exalead, Google, HackerOne, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ViewDNS, Yahoo
Certificates: Active pulls (optional), Censys, CertSpotter, Crtsh, Entrust, GoogleCT
AlienVault, BinaryEdge, BufferOver, CIRCL, CommonCrawl, DNSDB, GitHub, HackerTarget, Mnemonic, NetworksDB, PassiveTotal, Pastebin, RADb, Robtex, SecurityTrails, ShadowServer, Shodan, Spyse (CertDB & FindSubdomains), Sublist3rAPI, TeamCymru, ThreatCrowd, Twitter, Umbrella, URLScan, VirusTotal, WhoisXML
Web Archives: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback

Some interesting source code can be found via the following link:
https://github.com/OWASP/Amass/tree/master/services

jq: error (at :0): Cannot iterate over null (null)
parse error: Invalid numeric literal at line 1, column 7

I get these issues while using the tool.

[⍥] Perfoming Sud⍥my scans - Warning: require cf-check but it's is not installed.Trying to setup pkg_cf-check cp: missing destination file operand after '/usr/local/bin/' Try 'cp --help' for more information.

I used pip install censys it says requirements satisfied.

• Traceback (most recent call last): File "lib/censys/censys_subdomain_finder.py", line 3, in <module> import censys.certificates ImportError: No module named censys.certificates

• /root/tools/subdomain-enum/Sudomy/plugin/exec_takeover: line 55: parallel: command not found

To automate the search for specific subdomains it would be very good if you could simply use a file with predefined URLs.
Example:

sudomy --no-probe -d /subfolder/FILE.TXT -o /subfolder/OUTPUTFILE.TXT

[Inputfile.txt]
domain1.tk
domain2.co
domainxy.co.uk
test.xysites.co.uk

sudomy -d testfire.net

The printouts have a space character. Incoming data has not been checked.

⇒  cat subdomain.txt                        
altoro.testfire.net
computerserviceandsales.cn srchttpdemo.testfire.net
demo-analytics.testfire.net
demo.testfire.net
demo2.testfire.net
domain2.testfire.net
evil.testfire.net
ftp.testfire.net
hkcastte.com srchttpdemo.testfire.net
httpdemo.testfire.net
localhost.testfire.net
superkeychain.com srchttpdemo.testfire.net
testfire.net
testsite.testfire.net
wellpoint.jobs.net srchttpdemo.testfire.net
wellpoint.se srchttpdemo.testfire.net
www.testfire.net

The following command can solve the problem.

cat subdomain.txt| grep testfire.net|grep -Eo "\b[A-Za-z0-9.-]+\.[A-Za-z]{2,6}\b" | sort -u

It seems docker image doesn't have wappalyzer installed and thus it is not possible to identify apps

Command:

sudo docker run -v "${PWD}/output:/usr/lib/sudomy/output" -it --rm screetsec/sudomy:v1.1.2 --all -d somedomain --html -nT -sS -tO -aI

Output:

Error: require wappalyzer for identify apps but it's is not installed. Aborting.

https://www.threatcrowd.org/searchApi/v2/domain/report/?domain=google.com

/sudomy: line 358: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 359: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 360: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 361: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 362: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 363: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 364: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 365: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 366: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 367: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 368: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 369: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 370: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 371: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 372: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 373: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 374: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 375: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 376: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 377: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory

/ | _ | ()()_ __ _ _
__ \ || / _ / __ \ ' \ || |
|/_,_,_/||__, |
|__/ v{1.1.9#dev} by @screetsec
Sud⍥my - Fast Subdmain Enumeration and Analyzer
http://github.com/screetsec/sudomy

[!] This tool is for educational purpose only.
Usage of sudomy for attacking targets without prior mutual consent is illegal
developers assume no liability and are not responsible for any misuse or damage cause by this program

[⍥] Perfoming Sud⍥my scans

[*] Load target domain: xxxxxxx.com
- starting scanning @ 2020-10-20 21:04:17

[+] Running & Checking source to be used

./sudomy: line 620: SHODAN: command not found
./sudomy: line 620: WEBARCHIVE: command not found
./sudomy: line 620: DNSDUMPSTER: command not found
./sudomy: line 620: CERTSPOTTER: command not found
./sudomy: line 620: CERTSH: command not found
./sudomy: line 620: BINARYEDGE: command not found
./sudomy: line 620: CENSYS: command not found
./sudomy: line 620: VIRUSTOTAL: command not found
./sudomy: line 620: THREATMINER: command not found
./sudomy: line 620: BUFFEROVER: command not found
./sudomy: line 620: FINDSUBDOMAIN: command not found
./sudomy: line 620: THREATCROWD: command not found
./sudomy: line 620: SECURITY_TRAILS: command not found
./sudomy: line 620: ENTRUST: command not found
./sudomy: line 620: ALIENVAULT: command not found
./sudomy: line 620: RAPIDDNS: command not found
./sudomy: line 620: URLSCAN: command not found
./sudomy: line 620: RIDDLER: command not found
./sudomy: line 620: COMMONCRAWL: command not found
./sudomy: line 620: HACKERTARGET: command not found

[+] Get & Count subdomain total From source

[+] Parsing & Sorting list Domain

./sudomy: line 339: ${OUT}/${DATE_LOG}/${DOMAIN}/${RESULT_SUBDOMAIN}: ambiguous redirect
sed: can't read /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
sed: can't read &subdomain/Sudomy/output/*.log: No such file or directory
./sudomy: line 919: /home/mrcyguru/Desktop/Find/script/Dns: No such file or directory
./sudomy: line 920: exec_httprobe: command not found

[+] Sud⍥my has been sucessfully completed

https://account.spyse.com/apidocs

Tools is installed but error when running on grep command.

grep --version
grep (BSD grep) 2.5.1-FreeBSD

This is the error when i running enumeration ./sudomy -d hackerone.com.

i using kali linux 2020.2, how to fix this problem

Once you run the program, it loads but the first two lines are
"sudomy.api: No such file or directory"
"sudomy.conf: No such file or directory"

The two files are in the same directory.

##Cant install chromium packages .

After running this below command in my ubuntu18.4

apt-get install jq nmap phantomjs npm chromium parallel

It is giving me this error

Package chromium is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
However the following packages replace it:
chromium-bsu:i386 chromium-bsu
E: Package 'chromium' has no installation candidate

Please help me.

Hi

Threatminer    parse error: Invalid numeric literal at line 1, column 7

Please fix it!

Thanks!

⍥  Securitytrails                   [ ✕ ]
⍥  Censys                           [ ✔ ]
⍥  Threatminer                      [ ✔ ]
⍥  Hackertarget                     [ ✔ ]
⍥  Certspotter                      [ ✔ ]
⍥  Virustotal                       [ ✔ ]
⍥  Entrust                          [ ✔ ]
⍥  Dnsdumpster                      [ ✔ ]
⍥  Threatcrowd                      [ ✔ ]
⍥  Riddler                          [ ✔ ]
⍥  Webarchive                       [ ✔ ]
⍥  Shodan                           [ ✔ ]

jq: error (at :0): Cannot iterate over null (null)
jq: error (at :16): Cannot iterate over null (null)
⍥ Findsubdomain [ ✔ ]

Hi, I added sudomy to the bin folder, throug a soft link, but when i run from each path (for example my home), sudomy tries to create a folder in the path of soft link, not in the current path.

Many thanks. sudomy is awesome!

Regards.

While running Sudomy I get the following error:

Traceback (most recent call last):
  File "lib/censys/censys_subdomain_finder.py", line 3, in <module>
    import censys.certificates
ImportError: No module named censys.certificates

pip3 install censys
Requirement already satisfied: censys in /usr/local/lib/python3.8/dist-packages/censys-0.0.8-py3.8.egg (0.0.8)
Requirement already satisfied: netaddr in /usr/lib/python3/dist-packages (from censys) (0.7.19)
Requirement already satisfied: requests in /home/kali/.local/lib/python3.8/site-packages (from censys) (2.24.0)
Requirement already satisfied: certifi>=2017.4.17 in /home/kali/.local/lib/python3.8/site-packages (from requests->censys) (2020.6.20)
Requirement already satisfied: chardet<4,>=3.0.2 in /usr/lib/python3/dist-packages (from requests->censys) (3.0.4)
Requirement already satisfied: idna<3,>=2.5 in /home/kali/.local/lib/python3.8/site-packages (from requests->censys) (2.10)
Requirement already satisfied

Same with pip

pip install censys
Defaulting to user installation because normal site-packages is not writeable
Requirement already satisfied: censys in /home/kali/.local/lib/python2.7/site-packages (0.0.8)

this tool unable to detect heroku takeover :)

https://searchdns.netcraft.com/?restriction=site+ends+with&host=google.com

Help me out

Dear Team,
I got this error while checking my test domain. Would you please tell me how to fix it? I'm using Sudomy on my mac OS.

./sudomy: line 374: wget: command not found
usage: grep [-abcDEFGHhIiJLlmnOoqRSsUVvwxZ] [-A num] [-B num] [-C[num]]
[-e pattern] [-f file] [--binary-files=value] [--color=when]
[--context[=num]] [--directories=action] [--label] [--line-buffered]
[--null] [pattern] [file ...]
cat: /Users/tester/Downloads/Sudomy/output/FRiddler.log: No such file or directory
rm: /Users/tester/Downloads/Sudomy/output/FRiddler.log: No such file or directory
Traceback (most recent call last):
File "lib/censys/censys_subdomain_finder.py", line 3, in
import censys.certificates
ImportError: No module named censys.certificates
jq: error (at :16): Cannot iterate over null (null)
jq: error (at :0): Cannot iterate over null (null)
jq: error (at :0): Cannot iterate over null (null)
⍥ Findsubdomain [ ✔ ]
sed: 1: "/Users/tester/Down ...": extra characters at the end of q command
(23) Failed writing body
usage: grep [-abcDEFGHhIiJLlmnOoqRSsUVvwxZ] [-A num] [-B num] [-C[num]]
[-e pattern] [-f file] [--binary-files=value] [--color=when]
[--context[=num]] [--directories=action] [--label] [--line-buffered]
[--null] [pattern] [file ...]
(23) Failed writing body

This will be great if there are several modes, such as: single, list, pipeline
and silent mode (show only subdomains in stdout) to chained with other tools.

Hi @screetsec
It would be much better to add a switch to save output file on a custom / userdefined path without creating datewise folder.

Shell command PID 57537 returned an abnormal error code: '1'
Screenshot somehow failed

the screenshot seems all failed

Traceback (most recent call last):
File "lib/censys/censys_subdomain_finder.py", line 3, in
import censys.certificates
ImportError: No module named censys.certificates
⍥ Findsubdomain [ ✔ ]
jq: error (at :0): Cannot iterate over null (null)
parse error: Invalid numeric literal at line 1, column 109
⍥ Entrust [ ✕ ]
⍥ CommonwCrawl [ ✔ ]
(23) Failed writing body
(23) Failed writing body
(23) Failed writing body

I'm getting this error when trying to pull from Docker Hub

⋊> ~ docker pull screetsec/sudomy:v1.1.6-dev                                                          
Error response from daemon: manifest for screetsec/sudomy:v1.1.6-dev not found: manifest unknown: manifest unknown

Anyone has figure out how to solve?

https://api.github.com/search/repositories?q=google.com
https://gist.github.com/search?utf8=%E2%9C%93&q=google.com

[*] Load target domain: domain.com
- starting scanning @ 2019-10-17 16:16:44

[+] Running & Checking source to be used

⍥  Shodan				[ ✔ ]
⍥  Webarchive			[ ✔ ]
⍥  Virustotal			[ ✔ ]
⍥  Certsh				[ ✔ ]
⍥  Censys				[ ✕ ]
⍥  Binaryedge			[ ✕ ]
⍥  Entrust				[ ✔ ]
⍥  Certspotter			[ ✔ ]
⍥  Bufferover			[ ✔ ]
⍥  Threatcrowd			[ ✔ ]
⍥  Securitytrails			[ ✔ ]
⍥  Riddler				[ ✔ ]
⍥  Hackertarget			[ ✔ ]
⍥  Threatminer			[ ✔ ]
⍥  Dnsdumpster			[ ✔ ]

jq: error (at :0): Cannot iterate over null (null)
⍥ Findsubdomain [ ✔ ]

https://certificatedetails.com/api/list/google.com

https://jonlu.ca/anubis/subdomains/google.com

The check for Fly.io subdomain takeover is simply
checking for "404 Not Found" , which is a really common string, and thus has a lot of false positives.

The links for http sites are currently not using anchor tags. So one has to manually copy and paste. It would be nice if we can just click and visit the page.

it says:

bash sudomy -d hackerone.com
error: Error: require nmap but it's is not installed. Aborting.

When using Sudomy from docker, this screenshot feature fails since there is no chrome.

Unable to locate a valid installation of Chrome to use. gowitness needs at least Chrome/Chrome Canary v60+. Either install Google Chrome or try specifying a valid location with the --chrome-path flag

How would I go about fixing that?

If --tcp-fastopen https://en.wikipedia.org/wiki/TCP_Fast_Open is used, the results can be loaded faster.
Another thing would be to use DNS over HTTPS for example, this could improve security.

Examples:

curl --tcp-fastopen --tcp-nodelay exampledomain.com
curl --doh-url https://cloudflare-dns.com/dns-query exampledomain.com

hello i have this problem
i want help in this

Error: require httprobe but it's is not installed. Aborting.

curl -s "https://certspotter.com/api/v0/certs?domain=google.com"

Hi @screetsec,

Sometimes when I search for subdomains I get incorrect URLs in the results.
Here are some examples:

0 bpool.id.
10 dc-3ba5129c147c.saltpool.net.
10 gnark-mining.com.
10 mail.miningcoins.ca.
5 post.blockhunter.info.

I hope the information is useful for you to fix the bug.

https://github.com/tomnomnom/assetfinder

i have a question how can i update this from command line

When i use the default command ./sudomy --all -d hackerone.com --html
there is some error on the console and my sudomy don'r flow like what you show in the video,and is just stuck at the start,why?

[⍥] Perfoming Sud⍥my scans
- Warning: require cf-check but it's is not installed.Trying to setup pkg_cf-check
cp: missing destination file operand after '/usr/local/bin/'
Try 'cp --help' for more information.