Features • Install • Usage • Running SubCat
SubCat a subdomain discovery tool that discovers valid subdomains for websites by using passive online sources. It has a simple modular architecture and is optimized for speed. SubCat is built for doing one thing only - passive subdomain enumeration, and it does that very well.
We have designed SubCat to comply with all passive sources licenses, and usage restrictions, as well as maintained a consistently passive model to make it useful to both penetration testers and bug bounty hunters alike.
- Fast and powerful resolution and wildcard elimination module
- Curated passive sources to maximize results
- Optimized for speed, very fast and lightweight on resources
- STDIN/OUT support for integrating in workflows
- Scope limitation based on given IP ranges list
# Linux, Windows, MacOS
pip3 install -r requirements.txt
python3 subcat.py -h
This will display help for the tool. Here are all the switches it supports.
Flags:
INPUT:
-d --domain string domains to find subdomains for
-l string[] | stdin list of domains to find subdomains for
--scope string Show only in cope
OUTPUT:
-sc, --status-code string Show response status code
-nip --no-ip Do not respolve IP
CONFIG:
-t --threads Number of threads used
DEBUG:
-v show verbose outputcat domains | python3 subcat.pypython3 subcat.py -d hackerone.com
; ;
ρββΚ ;ββΝ
έΆχββββββββββββββββββΒ
;ΣΆχΜ΅΅ΫΝββββββββ Ϋ΅΅ΫβββΝ
όΆΆχβ Ά ββββ΅ Ά΅ βββββ
χΆΆΆφβΒ; Ϋ΅;έββββΒ; Ϋ΅ ρββββββ
ΆΆΆΆδβββββββββ;χββββββμβββββββ
ΪχχχχΧβββββββββββββββββββθθθθΚ
·ϊβθβζ Ϊθθβββββββββββββββμ ;όβΫ΅
·΅ ΅ΫΫΫΆΆθβββββββββθθΫ΅ ΅Ϋ΅
;ΣΆθββββΒΝρρρμ
;ΣΆΆβββββββββββμ
▄∞∞∞∞∞▄, ╒∞∞▄ ∞∞▄ ▄∞∞∞∞∞∞▄ ,▄∞∞∞∞▄ ▄∞∞4▄ ╒∞∞∞∞∞∞∞▄,
▐▄ ═▄▄▄ ▐█▐ ,▀ j' █▌█ ▄▄▄ ▀█▌█▀ ╓▄▄ ▀▄ ¡█ , ▐█ ▐▄▄▄ ▄▄██
▐▄ `'""▀██▐ █▌ j █▌█ `"" ▄█▌█ ▐█▀`▀▄██' M $██ █, `█ ▐█```
j▀▀███▌ ▐█▐ ▀▌▄█ ▀▀█ ▐███ █▌▄ ▀█▄▄▀ ▐█M▀. ▀█▄.▀ J▀
╚▄,,¬¬⌐▄█▌ ▀▄,,, ▄██ █,,,,,▓██▌ ▀▄,,,,▄█╩j▌,██▀▀▀▀▌,█▌`█,▐█
▀▀▀▀▀▀▀ ▀▀▀▀▀▀ ""▀▀▀▀▀▀ ▀▀▀""` ▀▀▀ ▀▀▀ ▀▀▀
΅qΆΆΆΆββ V1.0@duty1g ββββββΡ΅
ΫθΆΆΆββββββββββββββββΡ΅
΅ΫΫΫΫΝNNΝΫΫΫΐ΅΅
[12:37:13] [INFO]: extracted subdomains : 14
docs.hackerone.com 185.199.111.153
support.hackerone.com 104.16.51.111
3d.hackerone.com 0.0.0.0
mta-sts.forwarding.hackerone.com 185.199.110.153
api.hackerone.com 104.16.99.52
www.hackerone.com 104.16.99.52
events.hackerone.com 0.0.0.0
a.ns.hackerone.com 162.159.0.31
b.ns.hackerone.com 162.159.1.31
resources.hackerone.com 3.98.63.202
mta-sts.managed.hackerone.com 185.199.111.153
gslink.hackerone.com 13.224.226.45
mta-sts.hackerone.com 185.199.111.153
hackerone.com 104.16.99.52
To run the tool on a target, just use the following command.
SubCat is made with 🖤 by duty1g
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent