2015-10-15

This app will bruteforce for exisiting subdomains and provide the following information:

+ IP address

+ Host

+ if the 3rd party host has been properly setup. (for example if site.example.com is poiting to a nonexisiting Heroku subdomain, it’ll alert you) -> Currently only works with AWS, Github, Heroku, shopify, tumblr, blogspot/blogger and squarespace.

There may be some false positives depending on the host configurations.



Example Output

sub_brute.rb Script:

list.txt:

Source : https://github.com/nahamsec

Show more