Skip to content
This repository has been archived by the owner on Dec 16, 2022. It is now read-only.

Subdomain Tools & Open Redirection Tool #123

Open
attacker34 opened this issue Jan 18, 2020 · 1 comment
Open

Subdomain Tools & Open Redirection Tool #123

attacker34 opened this issue Jan 18, 2020 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@attacker34
Copy link

Hi @sethsec

I've just saw that only two tools are being used for retrieving subdomains. I would like you to Check these Tools

https://github.com/Anonymous1807/Subdomain-Scanner.git
https://github.com/shmilylty/OneForAll

Please add this Tool for ==Open Redirection== Checking:

https://github.com/ak1t4/open-redirect-scanner/

Here are some more vectors related to open redirection:


https://github.com/cujanovic/Open-Redirect-Payloads/blob/master/Open-Redirect-payloads.txt
https://github.com/payloadbox/open-redirect-payload-list
https://pentester.land/cheatsheets/2018/11/02/open-redirect-cheatsheet.html


@sethsec sethsec self-assigned this Jan 24, 2020
@sethsec sethsec added the enhancement New feature or request label Jan 24, 2020
@sethsec
Copy link
Owner

sethsec commented Jan 24, 2020

Thanks for this @attacker34! Adding the open redirect tools should be easy. For the subdomain tools, it might be more complicated. Currently I have very basic parsing of subdomain tools. If the tool can output a subdomain per line, and nothing else, I can handle it. If the tool spits out a lot of other information, my lame parser chokes on it. I'll play around with all of these suggested tools soon and see if i can get them added. thanks for the suggestions!

If you know the right command line flags to get the output to be like below, I can add them more quickly (and you can test it on your own in the config.ini without any celerystalk modifications:

subdomain1.com
subdomain2.com

let me know what you find!

sethsec added a commit that referenced this issue Apr 28, 2020
… commands.

This allows output to be saved to files. After command is completed the file is parsed with NmapParser.parse_fromfile(file).
Cleaned up some code that has been commented out for a long time.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants