SubDomainizer v2.0 - find subdomains hidden in inline and external Javascript files of page

[itsMe]

SubDomainizer

SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascript present in the given URL. This tool also finds S3 buckets, cloudfront URL’s and more from those JS files which could be interesting like S3 bucket is open to read/write, or subdomain takeover and a similar case for cloudfront. It also scans inside the given folder which contains your files.

Cloud Storage Services Supported:

SubDomainizer can find URL for following cloud storage services:

1. Amazon AWS services (cloudfront and S3 buckets)
2. Digitalocean spaces
3. Microsoft Azure
4. Google Cloud Services
5. Dreamhost
6. RackCDN.

Changelog v2.0

SANs Feature:
Added a feature to find Subject Alternative Names for already found subdomains from different sources.
Two options can be used with -san argument i.e. all or same.

    same will find only subdomains for TLD of the URL.
    all will find all (sub)domains having the same SAN for a given subdomain.

Secret Location Feature:
Added a feature to display the location of secrets.

    Inline in case if secret(s) found within the page (used in -u argument)
    URL of file in case if secret(s) found on External JS file or Github URL or File path (in case of the folder).

To see this hidden content, you must like this content.