domainharvester - Production-grade defensive security scanner for do

项目说明

DomainHar (DH)

![License: MIT]()
![Python 3.8+]()
![Contributions Welcome]()

> 🚀 Production-Grade Defensi Scanner for Ethical Hackers & Security Professionals

DomainHar is a comprehensi reconnaissance tool designed for authorized security assessments. It performs passive and acti to unco in domains, networks, and web applications.

✨ Features

| Module | Description | Key Capabilities |
|--------|-------------|------------------|
| 🔍 DNS Enumeration | Comprehensive DNS record analysis | A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, SPF, PTR, DNSSEC, Zone Transfer |
| 📋 WHOIS Analysis | Domain registration intelligence | Age, expiration, privacy protection, registrar analysis, suspicious emails |
| 🌐 IP & ASN Profiling | Geolocation & routing analysis | RDAP lookups, country/org detection, high-risk IP flagging |
| 🔒 SSL/TLS Inspection | Certificate security assessment | , SAN matching, self-signed detection, deprecated protocol warnings |
| 🔌 Port Scanning | TCP port enumeration | Service identification, sensitive port exposure detection |
| 📧 Email Security | Mail ser checks | MX, SPF, DMARC , policy analysis |
| 🌍 Subdomain Discovery | Attack surface mapping | Certificate Transparency, brute-force enumeration |
| 🛡️ WAF Detection | Web application firewall identification | Cloudflare, Akamai, Imperva, F5 detection |
| ☁️ Cloud Storage Checks | Misconfigured cloud assets | AWS S3 bucket enumeration |
| 🔄 CORS Testing | Cross-origin resource sharing analysis | Misconfiguration detection |
| 🌐 Web Fingerprinting | Technology stack identification | CMS detection, security headers, missing protections |
| 📂 Asset Exposure | Sensitive file/path discovery | .env, .git, backups, admin panels |
| 🕰️ Wayback Analysis | Historical web intelligence | Archived URL har |
| 👥 Social Media Intel | OSINT on social presence | Platform existence checks |

🛠️ Installation

Option 1: Direct Python Execution (Recommended)

1. Create & Activate En:

2. Install Dependencies:

3. Run the Scanner:

Option 2: Install as Package

Then run:

🚀 Quick Start

Interactive Mode

Full Scan (All Modules)

Specific Modules

Passive Mode (No Acti)

Custom Configuration

📊 Port Presets

📝 Logging & Output

Enable logging:

Reports are saved as:

Customize prefix: --output-prefix my_scan
Skip saving: --no-save

⚙️ Module Reference

A modules: dns, whois, ip, ssl, ports, email, subdomains, waf, cloud, cors, web, assets, wayback, social

Run all: --modules all

🔧 Operational Flags

| Flag | Description |
|------|-------------|
| --passive | Skip acti (ports, TLS sockets, zone transfers) |
| --workers | Concurrent threads (default: 60) |
| --retries | HTTP retry attempts (default: 2) |
| -- | Debug-le |
| --log-file | Write logs to file |
| --timeout | Request timeout in seconds (default: 5) |
| --delay-min/max | Stealth delay between requests |
| --ports | Port scan preset or custom ranges |
| --output-prefix | Custom report filename prefix |
| --no-save | Skip writing report files |

⚠️ Important Notes

🤝 Contributing

Contributions are welcome! Please:

1. Fork the repository
2. Create a feature branch
3. Submit a pull request
4. Follow ethical guidelines

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

----

Built with ❤️ for the security community.

Stay ethical. Stay curious. Stay safe. Stay learning!

项目信息

开发语言：Python

Star 数：3

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Production-grade defensive security scanner for domain reconnaissance展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。