subdover - Subdover is a MultiThreaded Subdomain Takeover Vul

项目说明

<h1 align="center">SubDover</h1>
<p align="center">
<a href="
<img src="
</a>
<a href="
<img src="
</a>
<a href="
<img src="
</a>
<a href="
<img src="
</a>
</p>

Subdover is a *MultiThreaded* Subdomain Takeo Scanner *Written In Python3*, Which has more than *88+ Fingerprints* of potentially services. Uses *CNAME record* for of findings.

Built-in Subdomain Enumeration Feature & Auto HTTP prober [Uses Open Source Tool for Subdomain Enum & HTTP probing i.e. findomain & httpx]

> Total_Fingerprints(Aquatone + Subjack + Subzy + SubOver) <<< Total_Fingerprints(SubDover)

Disclaimer

THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. YOU MAY USE THIS SOFTWARE AT YOUR OWN RISK. THE USE IS COMPLETE RESPONSIBILITY OF THE END-USER. THE DE ASSUME NO LIABILITY AND ARE NOT RESPONSIBLE FOR ANY MISUSE OR DAMAGE CAUSED BY THIS PROGRAM.

Features

Tested On

![Windows)]() Windows 10

![Windows)]() Windows 8.1 - Pro

Prerequisite

How To Use in Linux

How To Use in Windows

How to Install Subdover in PentestBox

A Arguments

| Short Hand | Full Hand | Description |
| ---------- | --------- | ----------- |
| -h | --help | show this help message and exit |
| -t | --thread | Number of Threads to Used. Default=10 |
| -o | --output | Sa in TXT file|
| -skip |--skip-httpx | Skip HTTP/HTTPS Protocal Resolution (HTTP Probing) [NOTE]: You must manually use httpx/httprobe on your subdomain list & then provide that final subdomains list using --list or -l flag |
| -s | --fingerprints | Show A Fingerprints & Exit|

* Required Arguments

| Short Hand | Full Hand | Description |
| ---------- | --------- | ----------- |
| -d | --domain | Target Wildcard Domain [For AutoSubdomainEnumeration], ex:- google.com |
| -l | --list | Target Subdomain List, ex:- google_subdomain.txt |

A Fingerprints & CNAMES of potentially services

| No. | Service Name | Status | CNAME | Fingerprints |
| --- | ------------ | ------ | ----- | ------------ |
| 1. | Acquia | | ['acquia-test.co'] | The site you are looking for could not be found. |
| 2. | Acti | | ['acti.com'] | alt="LIGHTTPD - fly light." |
| 3. | AfterShip | | ['aftership.com'] | Oops.</h2><p class="text-muted text-tight">The page you're looking for doesn't exist. |
| 4. | AgileCRM | | ['cname.agilecrm.com', 'agilecrm.com'] | Sorry, this page is no longer a. |
| 5. | Aha | | ['ideas.aha.io'] | There is no portal here ... sending you back to Aha! |
| 6. | Airee.ru | | ['cdn.airee.com', 'airee.com'] | LaterADD |
| 7. | Anima | | ['NOT_A'] | If this is your website and you've just created it, try refreshing in a minute |
| 8. | Apigee | | ['-portal.apigee.net'] | |
| 9. | AWS/S3 | | ['amazonaws'] | The specified bucket does not exist |
| 10. | Bigcartel | | ['bigcartel.com'] | <h1>Oops! We could&#8217;t find that page.</h1> |
| 11. | Bitbucket | | ['bitbucket.io'] | Repository not found |
| 12. | Brightcove | | ['bc.com', 'brightco.com', 'gallery.video'] | <p class="bc-gallery-error-code">Error Code: 404</p> |
| 13. | Canny.io | | ['cname.canny.io'] | There is no such company. Did you enter the right URL? |
| 14. | CampaignMonitor | | ['createsend.com', 'name.createsend.com'] | Double check the URL or <a href="mailto: |
| 15. | Cargo | | ['cargocollective.com'] | If you're moving your domain away from Cargo you must make this configuration through your registrar's DNS control panel. |
| 16. | CargoCollective | | ['subdomain.cargocollective.com'] | 404 Not Found |
| 17. | Cloudfront | Edge case | ['cloudfront.net'] | Bad Request: ERROR: The request could not be satisfied |
| 18. | Desk | Not | ['desk.com'] | Please try again or try Desk.com free for 14 days. |
| 19. | ElasticBeanstalk_AWS_service| | ['elasticbeanstalk.com'] | |
| 20. | Fastly | Edge case | ['fastly.net'] | Fastly error: unknown domain: |
| 21. | Feedpress | | ['redirect.feedpress.me'] | The feed has not been found. |
| 22. | Freshdesk | | ['freshdesk.com'] | May be this is still fresh! |
| 23. | Frontify | | ['frontify.com'] | 404 - Page Not Found</h1> |
| 24. | GetResponse | | ['.gr8.com'] | With GetResponse Landing Pages, lead generation has never been easier |
| 25. | Ghost | | ['ghost.io'] | The thing you were looking for is no longer here, or never was |
| 26. | Github | | ['github.io'] | There isn't a GitHub Pages site here. |
| 27. | Help Juice | | ['helpjuice.com'] | We could not find what you're looking for |
| 28. | Helprace | | ['helprace.com'] | Admin of this Helprace account needs to set up domain alias |
| 29. | Help Scout | | ['helpscoutdocs.com'] | No settings were found for this company |
| 30. | Heroku | Edge case | ['herokuapp'] | No such app |
| 31. | Hubspot | | ['sites.hubspot.net'] | Domain Not found |
| 32. | Instapage | | ['pageserve.co', 'secure.pageserve.co', 'instapage.com'] | You' A Missing Link. Our Apologies! |
| 33. | InterCom | | ['custom.intercom.help'] | <h1 class="headline"Uh oh. That page doesn't exist.</h1> |
| 34. | JetBrains | | ['myjetbrains.com'] | is not a registered InCloud YouTrack |
| 35. | Kajabi | | ['endpoint.mykajabi.com'] | <h1>The page you were looking for doesn't exist.</h1> |
| 36. | Landingi | | ['cname.landingi.com'] | <p>The page you are looking for is not found.</p> |
| 37. | LaunchRock | | ['launchrock.com'] | It looks like you may ha a wrong turn somewhere. Don't worry...it happens to all of us. |
| 38. | LeadPages.com | | ['custom-proxy.leadpages.net', 'leadpages.net'] | Double check that you have the right web address and give it another go!</p> |
| 39. | Mashery | Edge Case | ['mashery.com'] | Unrecognized domain |
| 40. | MicrosoftAzure | | ['cloudapp.net', 'cloudapp.azure.com', 'azurewebsites.net', 'blob.core.windows.net', 'cloudapp.azure.com', 'azure-api.net', 'azurehdinsight.net', 'azureedge.net', 'azurecontainer.io', 'database.windows.net', 'azuredatalakestore.net', 'search.windows.net', 'azurecr.io', 'redis.cache.windows.net', 'azurehdinsight.net', 'ser.windows.net', '.com'] | 404 Web Site not found |
| 41. | Ngrok | | ['ngrok.io'] | ngrok.io not found |
| 42. | Pantheon | | ['pantheonsite.io'] | The gods are wise, but do not know of the site which you seek. |
| 43. | Pingdom | | ['stats.pingdom.com'] | This public report page has not been activated by the user |
| 44. | Proposify | | ['proposify.biz'] | If you need immediate assistance, please contact <a href="mailto: |
| 45. | Readme.io | | ['readme.io'] | Project doesnt exist... yet! |
| 46. | ReadTheDocs.org | | ['readthedocs.io'] | is unknown to Read the Docs |
| 47. | Shopify | Edge Case | ['myshopify.com'] | Sorry, this shop is currently una |
| 48. | SimpleBooklet | | ['simplebooklet.com'] | We can't find this <a href=" |
| 49. | Smartling | | ['smartling.com'] | Domain is not configured |
| 50. | Smugmug | | ['domains.smugmug.com'] | |
| 51. | StatusPage | | ['statuspage.io'] | You are being <a href=" |
| 52. | Strikingly | | ['.s.strikinglydns.com'] | But if you're looking to build your own website, |
| 53. | Surge.sh | | ['surge.sh'] | project not found |
| 54. | Sur | | ['pri.sgizmo.com', 'pri.sur.eu', 'pri.sgizmoca.com'] | data-html-name |
| 55. | Tave | | ['clientaccess.tave.com'] | <h1>Error 404: Page Not Found</h1> |
| 56. | Teamwork | | ['teamwork.com'] | Oops - We didn't find your site. |
| 57. | Thinkific | | ['thinkific.com'] | You may ha the address or the page may ha. |
| 58. | Tictail | | ['domains.tictail.com'] | to target URL: <a href=" |
| 59. | Tilda | Edge Case | ['tilda.ws'] | Please renew your subscription |
| 60. | Tumblr | | ['domains.tumblr.com'] | Whatever you were looking for doesn't currently exist at this address |
| 61. | Uberflip | | ['read.uberflip.com', 'uberflip.com'] | Non-hub domain, The URL you' does not provide a hub. Please check the URL and try again. |
| 62. | Unbounce | Edge Case | ['unbouncepages.com'] | The requested URL was not found on this server |
| 63. | UptimeRobot | | ['stats.uptimerobot.com'] | This public status page <b>does not seem to exist</b>. |
| 64. | UserVoice | | ['uservoice.com'] | This UserVoice subdomain is currently a |
| 65. | Vend | | ['.com'] | Looks like you' too far into cyberspace |
| 66. | WebFlow | | ['proxy.webflow.com', 'proxy-ssl.webflow.com'] | <p class="description">The page you are looking for doesn't exist or has been moved.</p> |
| 67. | WishPond | | ['wishpond.com'] | |
| 68. | Worksites.net | | ['NOT_A'] | Hello! Sorry, but the website you’re looking for doesn’t exist. |
| 69. | Wordpress | | ['wordpress.com'] | Do you want to register |
| 70. | Zendesk | Not | ['zendesk.com'] | Help Center Closed |
| 71. | Appery.io | | [''] | <p>This page will be updated automatically when your app is published.</p> |
| 72. | .com | | [''] | The deployment could not be found on . |
| 73. | Datocms.com | | [''] | <!doctype html><html><head><meta charset=\"utf-8\"><title>Loading...</title> |
| 74. | Jazzhr | Edge Case | ["jazzhr.com"] | "This account no longer active" |
| 75. | Kinsta | | ["kinsta.com"] | "No Site For Domain" |
| 76. | Smartjob | | ["smartjobboard.com", "mysmartjobboard.com"] | "This job board website is either expired or its domain name is invalid" |
| 77. | Wufoo | | ["www.wufoo.com", "subdomain.wufoo.com", "hello.wufoo.com", "pizzapalace.wufoo.com"] | "Hmmm....something is not right." |
| 78. | Wix | | ["wixdns.net"] | "Error ConnectYourDomain occurred" |
| 79. | Sprintful | | ["proxy.sprintful.com", "cname.sprintful.com", "sprintful.com"] | "This domain name does not have a default page configured." |
| 80. | Short-io | | ["cname.short.io"] | "This domain is not configured on Short.io" |
| 81. | Pagewiz | | ["s1.pagewiz.net"] | "pagewiz" |
| 82. | Netlify | Edge case | ["cname.netlify.app", "cname.netlify.com", "netlify.com", "netlify.app"] | "Not found - Request ID:" |
| 83. | Gitbook | | ["gitbook.io"] | "Domain not found" |
| 84. | Flywheel | | ["getflywheel.com"] | "We're sorry, you' on a page that is hosted by Flywheel"
| 85. | Announcekit | | ["cname.announcekit.app"] | "Error 404 - AnnounceKit"
| 86. | Flexbe | Edge Case | ["flexbe.com"] | "flexbe" |
| 87. | Gemfury | | ["furyns.com"] | "404: This page could not be found." |
| 88. | Hatenablog | | ["hatenablog.com"] | "404 Blog is not found" |

* NOTE: Make sure to confirm Subdomain
* If you got a false positi, then you can open a issue in this repo with that false +ve
* It will help us to decrease the false + & will impro mechanism

Screenshots

#### Help Menu

#### Scan Single Target

#### Enumerate Subdomain & Scan

#### Scan Targets from SubdomainList

#### Saving Result

#### Result of Scan

Contribute

* All Contributors are welcome, this repo needs contributors who will improve this tool to make it best.

TODO

Contributers

* Pushpender ()
* gaura ()

项目信息

开发语言：Python

Star 数：109

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。