Giter VIP home page Giter VIP logo

takeover's Introduction

I would recommend using NtHiM

takeover

Since Ice3man543 decided to discontinue the devlopment of their tool i.e SubOver, I thought it would be nice to revive this tool.

FAQs

Why?

The major reason behind reviving this tool would be to be able to perform subdomain takeover check on a mass scale. By mass scale I mean is that sometime what happens in that you have a program with a very large scope and loads of domains. Now if you're a monster than you'll have all the subdoma under a single file called domain.txt or something similar. But if you are a sane person than you'd like to keep all subdomains of a root domain in one file and this way there can be loads of files. So it would be better if we can just pass the path to the folder and relax.

Why not use one liner?

yeah I know that I can write a one liner combined with tools like nuclei or subjack but I kind don't want to :)

Why not use subjack?

I don't know why but I've had issue in installing subjack on digital ocean VPN. Whenever I try to pull it using go get it just hangs there. Also I am not sure if its under active development cause I noticed there are loads of pending issues and Pull requests.

Can I use different Providers list?

Currently no, but I plan to add this feature so like you can use file from subjack or if you make your own.

Options

  -d string
        directory having files of domains
  -https
        Force HTTPS connections
  -l string
        List of hosts to check takeovers on
  -p string
        Path of the providers file
  -t int
        Number of threads to use (default 20)
  -timeout int
        Seconds to wait before timeout (default 10)
  -v    Show verbose output

Usage

The usage is same as it was.

  • For hunting on the same list:
takeover -l <subdomain-list.txt>
  • For testing a directory with all the subdomain list
takeover -d <directory>

Make sure the directory doesn't have any other file otherwise the process will take extra time. Also the tool might crash(I'm still learning golang.)

Installation

You can download the binary from the release page. Also if you want you can clone this repository and build the binary yourself.

If you have go compiler installed then you can use go get github.com/mzfr/takeover.

NOTE: takeover uses provider.json file. So either have a file named providers.json in your current working directory you can provide the path via -p flag.

Acknowledgements and Credits

Thanks to Ice3man543 for making SubOver

Support

If you'd like you can buy me some coffee:

Buy Me A Coffee

takeover's People

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar

takeover's Issues

rewrite to use output of massdns

The idea here is that instead of just passing a long list of subdomains that may or may not resolve we should instead take input from tools like massdns or zdns. These tools are meant for the resolving process at a much higher rate than any other tool.

We can do something like:

Untitled Diagram

possible issue

The only possible issue I can think of is that others might have the output format differently. They might also be storing IP address etc so parsing that may be a bit tricky. Other than that I think this may be a better and faster way to check for takeovers.

Add support for directory

It would be nice if we can add support for accepting a directory as input. That directory would contain different files containing subdomains.

The important thing to keep here in mind is the memory usage of the system. If someone provides a directory containing large amount of files instead of reading all the files at once we should read one file than perform check and then read another file and so on. This might prevent the high memory consumption

update provider error

Traceback (most recent call last):
File "update_providers.py", line 17, in
if cols[1].text.strip() == "Vulnerable":
IndexError: list index out of range

for update_providers.py this error is coming

Fix the printing format

The data is printed in a not so good format.
Also, use some color library instead of using ascii.

when i run go run main.go

main.go:17:2: cannot find package "github.com/parnurzeal/gorequest" in any of:
/usr/local/bin/go/src/github.com/parnurzeal/gorequest (from $GOROOT)
/home/balu/go/src/github.com/parnurzeal/gorequest (from $GOPATH)

when i run go run main.go

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.