nsonaniya2010/SubDomainizer
SubDomainizer
SubDomainizer is a security scanning utility designed to map web infrastructure and identify sensitive information exposure. It functions as a reconnaissance tool that aggregates data from web pages, local files, and remote code hosting services to provide a comprehensive assessment of a target's attack surface.
The tool specializes in discovering hidden subdomains and infrastructure entry points through recursive web crawling and the analysis of SSL certificate metadata. It further secures environments by scanning source code and external repositories for exposed API keys, passwords, and other credentials using a combination of keyword pattern matching and entropy-based analysis.
Beyond domain and credential discovery, the utility performs cloud infrastructure auditing to detect misconfigured or publicly accessible storage buckets. By integrating these diverse scanning techniques, it consolidates findings into a unified report to assist in identifying potential security vulnerabilities and unauthorized infrastructure exposure.
Features
- Subdomain Discoveries - Extracts subdomains and sensitive credentials from web pages, local files, and remote code repositories.
- Credential Leak Detection - Scans source code and external files to identify accidentally exposed API keys, passwords, and sensitive credentials.
- Secret Scanning - Identifies exposed API keys and credentials using keyword matching and entropy analysis across source code.
- Recursive Crawl Discoverers - Traverses linked resources and external files to discover hidden assets and subdomains across a target web infrastructure.
- GitHub Reconnaissance Tools - Queries remote code hosting services to find hidden subdomains and sensitive information within project repositories.
- Repository Content Scanning - Analyzes external code hosting services to find security vulnerabilities and leaked secrets within public or private project repositories.
- Cloud Storage Scanning - Scans web content and source files for cloud storage service addresses to detect misconfigured or publicly accessible buckets.
- Subject Alternative Name Management - Parses SSL certificate metadata to identify additional hostnames and network entry points associated with a target domain.
- Cloud Storage Security Scanners - Identifies misconfigured or publicly accessible cloud storage buckets that may contain private data or sensitive user information.
- Secret Entropy Detectors - Calculates the randomness of character sequences to identify high-entropy strings that likely represent cryptographic keys or passwords.
- Infrastructure Reconnaissance - Discovers hidden subdomains and infrastructure entry points to map the attack surface of a target web application.
- Subdomain Enumeration - Finds hidden subdomains and secrets in web pages and scripts.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
