subjack

Subjack is a Subdomain Takeover tool written in Go designed to scan a list of subdomains concurrently and identify ones that are able to be hijacked. With Go’s speed and efficiency, this tool really stands out when it comes to mass-testing. Always double-check the results manually to rule out false positives

Name:subjack

Category:Misconfiguration

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/subjack:49c51e5-patch-1

Output Type:

License:Unknown

Source:View Source

Parameters

domain · string

-dDomain

threads · string

-tNumber of concurrent threads (Default: 10).

verbose · boolean

-vDisplay more information per each request.

wordlist · file · required

-wWordlist file.

force-ssl · string

-sslForce HTTPS connections (May increase accuracy (Default: http://).

config-file · file

-cPath to configuration file.

timeout-sec · string

-timeoutSeconds to wait before connection timeout (Default: 10).

find-hidden-gems · boolean

-aFind those hidden gems by sending requests to every URL. (Default: Requests are only sent to URLs with identified CNAMEs)

presence-of-dead-record · boolean

-mFlag the presence of a dead record, but valid CNAME entry.