Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 33 additions & 17 deletions subdomain-Enum.py
Original file line number Diff line number Diff line change
@@ -1,25 +1,41 @@
#!/usr/local/bin/python
import requests
import json
import csv
import os
print ("\nSubdomain Enumeration Script\n")
def get_sub_domains(domain,filepath):
from datetime import datetime

print("\nSubdomain Enumeration Script\n")

def get_sub_domains(domain, json_filename, csv_filename):
url = "https://api.securitytrails.com/v1/domain/"+domain+"/subdomains"
#print(url)
querystring = {"children_only":"true"}
headers = {
'accept': "application/json",
'apikey': "APIKEY"
'accept': "application/json",
'apikey': "APIKEY"
}
response = requests.request("GET", url, headers=headers, params=querystring)
result_json=json.loads(response.text)
sub_domains=[i+'.'+domain for i in result_json['subdomains']]
f=open(filepath,'w+')
for i in sub_domains:
f.write(i+'\n')
f.close()
return sub_domains

domain=input("\nEnter Domain name : ")
filepath=input("\nPlease provide a file name to save : ")
get_sub_domains(domain,filepath)
data = json.loads(response.text)

# Save the JSON response to a file
with open(json_filename, mode='w') as file:
json.dump(data, file, indent=4)

subdomains = data.get("subdomains", [])
subdomain_list = [[subdomain] for subdomain in subdomains]

# Save subdomains to a CSV file
with open(csv_filename, mode='w', newline='') as file:
writer = csv.writer(file)
writer.writerow(["Subdomain"])
writer.writerows(subdomain_list)

return subdomains

domain = input("\nEnter Domain name: ")
now = datetime.now()
date_time = now.strftime("%Y-%m-%d %H:%M:%S")
json_filename = f"{domain}_data.json"
csv_filename = f"{domain}_subdomains.csv"
subdomains = get_sub_domains(domain, json_filename, csv_filename)

print(f"\n{len(subdomains)} subdomains found and saved in '{csv_filename}' and JSON response saved in '{json_filename}' file.")