Subover is a Hostile Subdomain Takeover tool designed in Python. From start, it has been aimed with speed and efficiency in mind. Till date, SubOver detects 36 services which is much more than any other tool out there. The tool is multithreaded and hence delivers good speed. It can easily detect and report potential subdomain takeovers that exist. The list of potentially hijackable services is very comprehensive and it is what makes this tool so powerful.
Installing
You need to have Python 2.7 installed on your machine. The following additional requirements are required -
- dnspython
- colorama
git clone https://github.com/Ice3man543/SubOver.git .
cd SubOver
# consider installing virtualenv
pip install -r requirements.txt
python subover.py -h
Usage
python subover.py -l subdomains.txt -o output_takeovers.txt
-l subdomains.txt
is the list of target subdomains. These can be discovered using various tool such as sublist3r or others.-o output_takeovers.txt
is the name of the output file. (Optional & Currently not very well formatted)-t
20 is the default number of threads that SubOver will use. (Optional)-V
is the switch for showing verbose output. (Optional, Default=False)
Currently Checked Services
- Github
- Heroku
- Unbounce
- Tumblr
- Shopify
- Instapage
- Desk
- Tictail
- Campaignmonitor
- Cargocollective
- Statuspage
- Amazonaws
- Cloudfront
- Bitbucket
- Squarespace
- Smartling
- Acquia
- Fastly
- Pantheon
- Zendesk
- Uservoice
- WPEngine
- Ghost
- Freshdesk
- Pingdom
- Tilda
- Wordpress
- Teamwork
- Helpjuice
- Helpscout
- Cargo
- Feedpress
- Freshdesk
- Surge
- Surveygizmo
- Mashery
FAQ
Q: What should my wordlist look like?
A: Your wordlist should include a list of subdomains you're checking and should look something like:
backend.example.com
something.someone.com
apo-setup.fxc.something.com
Your tool sucks!
Yes, you're probably correct. Feel free to:
- Not use it.
- Show me how to do it better.
Contact
Twitter: @Ice3man543
Credits
- Subdomain Takeover Scanner by 0x94
- subjack : Hostile Subdomain Takeover Tool Written In GO
- Anshumanbh : tko-subs
Related articles
- Pentest Tools For Ubuntu
- Hacker Tools
- Hackrf Tools
- Pentest Box Tools Download
- Hack Tools For Pc
- Hacker Tools For Mac
- Hack Tools
- Usb Pentest Tools
- What Is Hacking Tools
- Pentest Tools Subdomain
- Physical Pentest Tools
- Hacking Tools For Windows
- Hack Website Online Tool
- Hacker Tools Free
- Hacker Tools Windows
- Hack Website Online Tool
- Tools Used For Hacking
- How To Make Hacking Tools
- Best Hacking Tools 2019
- Hacking Tools For Kali Linux
- Hack Tools For Mac
- Hack Tools Download
- Hack Tools
- Hack Tools For Mac
- Pentest Tools Windows
- Hack Tools For Pc
- Pentest Tools List
- Pentest Tools Android
- Pentest Tools Linux
- Github Hacking Tools
- What Is Hacking Tools
- Termux Hacking Tools 2019
- Hacker Tools Free Download
- Pentest Tools For Windows
- Pentest Tools Linux
- Pentest Tools Subdomain
- Hack Tool Apk
- Hack And Tools
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Find Subdomains
- Hack Tools Online
- Hacking Tools Download
- Pentest Automation Tools
- Pentest Tools For Mac
- Hacking Tools Hardware
- Kik Hack Tools
- Pentest Tools Framework
- Hacking Tools For Beginners
- Hack Tools For Mac
- Hacking Tools Online
- Hacker Hardware Tools
- Game Hacking
- What Are Hacking Tools
- Hacker Search Tools
- Pentest Tools Linux
- World No 1 Hacker Software
- Hacking Tools For Windows
- Hacking Tools Name
- Hacking Tools Online
- Pentest Tools Subdomain
- Hack Tools For Mac
- Pentest Tools Url Fuzzer
- Hacker Tools Free
- Hacking Tools Github
- Blackhat Hacker Tools
- Hacking Tools Online
- Android Hack Tools Github
- Pentest Tools Apk
- Best Pentesting Tools 2018
- Pentest Tools Find Subdomains
- Hacking Apps
- Pentest Tools Kali Linux
- Hacking Tools 2019
- Pentest Tools For Mac
- Hack Tools Github
- Pentest Tools Subdomain
- Hack Tools Mac
- Pentest Tools Review
- Pentest Tools Linux
- Pentest Tools Open Source
- Hackrf Tools
- Ethical Hacker Tools
- Hacking Tools Pc
- Hack App
- Hacking Tools Windows 10
- Tools Used For Hacking
- Hacking App
- Pentest Tools Url Fuzzer
- Beginner Hacker Tools
- Pentest Tools Find Subdomains
- Hacking Tools Download
- Pentest Tools Linux
- Pentest Tools Port Scanner
- Pentest Tools Framework
- Growth Hacker Tools
- Hacker
- Hacker Tools For Mac
No comments:
Post a Comment