This bash script tool, will perform advanced subdomain enumeration using both Amass in Passive Mode, Sublist3r, save the results, it will then probe the subdomains into urls using httpx, save the results in a separate file, it will then resolve all the subdomains into ip addresses using a loop statement with hostname and grep/sed and save the results separately.
You need to have installed all the below tools:
Install lolcat: pip install lolcat
Install amass: https://github.com/OWASP/Amass
Install Sublist3r: https://github.com/aboul3la/Sublist3r
Install httpx: https://github.com/projectdiscovery/httpx
chmod +x bheh-sub-pwner.sh
./bheh-sub-pwner.sh domains.txt
This code is written by Black Hat Ethical Hacking, is free to use, and you can fork it, and expand it to perform better methodology and workflow! - 2022
Introducing our Merch Store, designed for the Offensive Security community. Explore a curated collection of apparel and drinkware, perfect for both professionals and enthusiasts. Our selection includes premium t-shirts, hoodies, and mugs, each featuring bold hacking-themed slogans and graphics that embody the spirit of red teaming and offensive security. Hack with style and showcase your dedication to hacker culture with gear that’s as dynamic and resilient as you are. 😊
