# nsonaniya2010/subdomainizer

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/nsonaniya2010-subdomainizer).**

_How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._

1,874 stars · 235 forks · Python · MIT

## Links

- GitHub: https://github.com/nsonaniya2010/SubDomainizer
- awesome-repositories: https://awesome-repositories.com/repository/nsonaniya2010-subdomainizer.md

## Topics

`bug-bounty` `bugbounty` `cloud-storage-services` `external-javascripts` `find-secrets` `find-subdomains` `madeinindia` `python3` `s3-bucket` `s3-buckets` `secretfinder` `secrets` `security` `security-automation` `security-tools` `subdomain-enumeration` `subdomain-scanner`

## Description

SubDomainizer is a security scanning utility designed to map web infrastructure and identify sensitive information exposure. It functions as a reconnaissance tool that aggregates data from web pages, local files, and remote code hosting services to provide a comprehensive assessment of a target's attack surface.

The tool specializes in discovering hidden subdomains and infrastructure entry points through recursive web crawling and the analysis of SSL certificate metadata. It further secures environments by scanning source code and external repositories for exposed API keys, passwords, and other credentials using a combination of keyword pattern matching and entropy-based analysis.

Beyond domain and credential discovery, the utility performs cloud infrastructure auditing to detect misconfigured or publicly accessible storage buckets. By integrating these diverse scanning techniques, it consolidates findings into a unified report to assist in identifying potential security vulnerabilities and unauthorized infrastructure exposure.

## Tags

### Security & Cryptography

- [Subdomain Discoveries](https://awesome-repositories.com/f/security-cryptography/subdomain-discoveries.md) — Extracts subdomains and sensitive credentials from web pages, local files, and remote code repositories.
- [Credential Leak Detection](https://awesome-repositories.com/f/security-cryptography/credential-leak-detection.md) — Scans source code and external files to identify accidentally exposed API keys, passwords, and sensitive credentials.
- [Secret Scanning](https://awesome-repositories.com/f/security-cryptography/secret-scanning.md) — Identifies exposed API keys and credentials using keyword matching and entropy analysis across source code.
- [Subject Alternative Name Management](https://awesome-repositories.com/f/security-cryptography/certificate-issuance-utilities/subject-alternative-name-management.md) — Parses SSL certificate metadata to identify additional hostnames and network entry points associated with a target domain.
- [Cloud Storage Security Scanners](https://awesome-repositories.com/f/security-cryptography/cloud-storage-security-scanners.md) — Identifies misconfigured or publicly accessible cloud storage buckets that may contain private data or sensitive user information.
- [Secret Entropy Detectors](https://awesome-repositories.com/f/security-cryptography/entropy-analysis/secret-entropy-detectors.md) — Calculates the randomness of character sequences to identify high-entropy strings that likely represent cryptographic keys or passwords.
- [Infrastructure Reconnaissance](https://awesome-repositories.com/f/security-cryptography/infrastructure-reconnaissance.md) — Discovers hidden subdomains and infrastructure entry points to map the attack surface of a target web application.

### Data & Databases

- [Recursive Crawl Discoverers](https://awesome-repositories.com/f/data-databases/url-crawl-queues/recursive-crawl-discoverers.md) — Traverses linked resources and external files to discover hidden assets and subdomains across a target web infrastructure.

### Development Tools & Productivity

- [GitHub Reconnaissance Tools](https://awesome-repositories.com/f/development-tools-productivity/github-reconnaissance-tools.md) — Queries remote code hosting services to find hidden subdomains and sensitive information within project repositories.
- [Repository Content Scanning](https://awesome-repositories.com/f/development-tools-productivity/remote-scanning-apis/repository-content-scanning.md) — Analyzes external code hosting services to find security vulnerabilities and leaked secrets within public or private project repositories.

### DevOps & Infrastructure

- [Cloud Storage Scanning](https://awesome-repositories.com/f/devops-infrastructure/cloud-storage-scanning.md) — Scans web content and source files for cloud storage service addresses to detect misconfigured or publicly accessible buckets. ([source](https://github.com/nsonaniya2010/subdomainizer#readme))

### Part of an Awesome List

- [Subdomain Enumeration](https://awesome-repositories.com/f/awesome-lists/devtools/subdomain-enumeration.md) — Finds hidden subdomains and secrets in web pages and scripts.