Giter Site home page Giter Site logo

ice3man543 / subover Goto Github PK

View Code? Open in Web Editor NEW
906.0 27.0 199.0 162 KB

A Powerful Subdomain Takeover Tool

License: BSD 2-Clause "Simplified" License

Go 100.00%
subdomain-takeover subdomain subdomains bug-bounty bugbounty takeover-subdomain hostile hostile-subdomain-takeover takeover pentesting

subover's Issues

providers.json

hello,
congrats for the tool, is awesome..!
can you please consider in the next release embedding providers.json in the tool so i wont have to change directory everytime i wanna scan some text file that is in an other dir ..
thanks

[ERROR] request canceled while waiting for connection

i get this 2 errors while running the tool and it stops scanning the other subdomains:

2019/11/29 18:09:21 [ERROR] Get: asda.asde.com => [Get http://asda.asde.com/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)] 2019/11/29 18:09:21 [ERROR] Get: asda.asde222.com => [Get http://asda.asde222.com/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)]

Am i doing something wrong? i'm running the tool with go run subover.go -l subs.txt

Domain already in use

Hi,
Your tool gave me this output: Takeover Possible At :

This is the dig output:
DiG 9.11.3-1ubuntu1-Ubuntu <<>> CNAME unbouncepages.com
it determined that out of this output the domain is vulnerable to subdomain takeover,
when registering to unbouncepages.com to try to claim the original domain it says that the domain is already in use.

peakon

Error message: open /src/github.com/Ice3man543/SubOver/providers.json: no such file or directory

I did what is written in the documentation:

go get github.com/Ice3man543/SubOver

Now, I find a new file ~/go/bin/SubOver in my personal home directory. When I now call ~/go/bin/SubOver, I get this message

$ ~/go/bin/SubOver -l output.temp 

SubOver v.1.2              Nizamul Rana (@Ice3man)
==================================================

open /src/github.com/Ice3man543/SubOver/providers.json: no such file or directory

Edit

I've done this on an Ubuntu 18.04 machine.

Installation issues in Kali Linux.

image

I am facing issues when installing the tool. The tool is fine, the installation method of golang has changed. Changing 'go get' command to 'go install' command followed by the source link and version does the job.

example command -

go install github.com/Ice3man543/SubOver@master

Automatically check both HTTP and HTTPS for Cloudfront

First off, love the tool. Great work.

Since Cloudfront domains can be either HTTP or HTTPS, can you add functionality to also check whichever protocol wasn't supplied? Maybe this could be a boolean argument like --check-protocols or something.

I'd fork and add it, but I haven't learned Go yet.

Thanks!

Tool not providing output

When running the tool against a list there isn't any output from the tool within the terminal or the output file. It seems like the tool isn't actually running against the targets and just exits.

OS: High Sierra

Installation issue

Hello sir,

Can i install it on windows7?if yes then what is the procedure and commands?

cannot find package

subover.go:10:5: cannot find package "github.com/parnurzeal/gorequest" in any of:
c:\go\src\github.com\parnurzeal\gorequest (from $GOROOT)
C:\Users\rizal\go\src\github.com\parnurzeal\gorequest (from $GOPATH)

I run it at windows? Is that possible?

Error: no such file or directory

If I run SubOver -l subdomains.txt like in the description an error appears:

SubOver v.1.2              Nizamul Rana (@Ice3man)
==================================================

open providers.json: no such file or directory

What is providers.json for a file?

Installation Issue

I am getting below error when running the ./subover.go

./subover.go: line 1: //: Is a directory
./subover.go: line 2: package: command not found
./subover.go: line 4: syntax error near unexpected token newline' ./subover.go: line 4: import ('

cannot find package "golang.org/x/net/publicsuffix"

When I try go build subover.go to install script, I get the following error:

/root/go/src/github.com/parnurzeal/gorequest/gorequest.go:32:2: cannot find package "golang.org/x/net/publicsuffix" in any of:
/usr/lib/go-1.11/src/golang.org/x/net/publicsuffix (from $GOROOT)
/root/go/src/golang.org/x/net/publicsuffix (from $GOPATH)

Please provide a complete installation guide.

Wrong fmt.Print function

fmt.Println("\n[\033[31;1;4mCLOUDFRONT\033[0m] Takeover Possible At : %s With HTTP & HTTPS", s.Url)

Either use:

fmt.Printf("\n[\033[31;1;4mCLOUDFRONT\033[0m] Takeover Possible At : %s With HTTP & HTTPS\n", s.Url)

or

fmt.Println("\n[\033[31;1;4mCLOUDFRONT\033[0m] Takeover Possible At : " + s.Url + " With HTTP & HTTPS")

nothing shown

Hello i just got this ...

./SubOver -l subs.txt
SubOver v.1.2 Nizamul Rana (@Ice3man)

[~] Enjoy your hunt !

Continues to run by not determining end of queue.

The Tool continues to run even when all the queue items have been checked.

There is a bug in the program. It keeps running indefinitely even on ending the queue. This leads to output not working. It's a good first issue for anyone to tackle.

I will fix it in future. But if someone does it, I'll be glad.

Github page takeover doesn't work

You might need to update the providers.json to detect the Github Page TakeOver at

"cname":["github.io"],

For my case the DNS for the takeover looked like
github.github.io. 1412 IN CNAME sni.github.map.fastly.net.

What do you think about updating it to match the following ?
"cname":["github.io", "fastly.net", "github.com", "github.map"],

Cheers

looks like the tool does not do anything

Hello,
When I execute this tool this is the output that I get:
Sub0ver -v -l domains.txt
screen shot 2018-06-24 at 22 48 58

It looks like the tool isn't working.
The content of the file domains.txt is a list of domains, for example:
www.example.com
new.domain.com
other.domain.com

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.