In this project I’ll show you a little python program that will make your search for subdomains easier. Especially when you use crt.sh website:

Github : AUTOMATED SUBDOMAINS EXTRACTOR

I made this program because I’m kinda lazy person. I always hated the fact when you have to begin a new bug bounty program, you begin to think of (S**t I have to do recon again, find API endpoints, juicy URLs, dirsearch, subdomains … ) It always frustrated me and that’s my main reason of creating this. One day I thought to spend more time to create my tools that will help me somehow and maybe you too.

This tool will try to search for subdomains by giving him an URL. It will extract URLs and put them in a file. This file will be validated by removing all duplicate URLs in it. After that, it will “Probe” the remaining subdomains  and put in a finale text file.

This is how to use the Auto_sub_extractor. It’s easy:

After executing the program it will make request to crt.sh and extract URLs

The program shows valid URLs after parsing all data extract from CRT.SH.

I will try to improve this python program to do some more interesting  stuff, like dirsearch or get API endpoints.

Happy Hacking

Categories: Uncategorized