Add files via upload

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2023 Nemesis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,95 @@
+# Subhunter
+## A fast subdomain takeover tool
+
+<img src="banner.png" width="1300">
+
+## Description:
+
+Subdomain takeover is a common vulnerability that allows an attacker to gain control over a subdomain of a target domain and redirect users intended for an organization's domain to a website that performs malicious activities, such as phishing campaigns,
+stealing user cookies, etc. It occurs when an attacker gains control over a subdomain of a target domain.
+Typically, this happens when the subdomain has a CNAME in the DNS, but no host is providing content for it.
+Subhunter takes a given list of subdomains and scans them to check this vulnerability.
+
+## Features:
+
+- Auto update
+- Uses random user agents
+- Built in Go
+- Uses a fork of fingerprint data from well known sources ([can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz/blob/master/README.md))
+
+## Installation:
+
+### Option 1:
+
+[Download](https://github.com/Nemesis0U/Subhunter/releases) from releases
+
+### Option 2:
+Build from source:
+
+    $ git clone https://github.com/Nemesis0U/Subhunter.git
+    $ go build subhunter.go
+
+## Usage:
+
+### Options:
+
+```
+Usage of subhunter:
+  -l string
+    	File including a list of hosts to scan
+  -o string
+    	File to save results
+  -t int
+    	Number of threads for scanning (default 50)
+  -timeout int
+    	Timeout in seconds (default 20)
+```
+
+### Demo (Added fake fingerprint for POC):
+
+```
+./Subhunter -l subdomains.txt -o test.txt
+
+  ____            _       _                       _
+ / ___|   _   _  | |__   | |__    _   _   _ __   | |_    ___   _ __
+ \___ \  | | | | | '_ \  | '_ \  | | | | | '_ \  | __|  / _ \ | '__|
+  ___) | | |_| | | |_) | | | | | | |_| | | | | | | |_  |  __/ | |
+ |____/   \__,_| |_.__/  |_| |_|  \__,_| |_| |_|  \__|  \___| |_|
+
+
+A fast subdomain takeover tool
+
+Created by Nemesis
+
+Loaded 88 fingerprints for current scan
+
+-----------------------------------------------------------------------------
+
+[+] Nothing found at www.ubereats.com: Not Vulnerable
+[+] Nothing found at testauth.ubereats.com: Not Vulnerable
+[+] Nothing found at apple-maps-app-clip.ubereats.com: Not Vulnerable
+[+] Nothing found at about.ubereats.com: Not Vulnerable
+[+] Nothing found at beta.ubereats.com: Not Vulnerable
+[+] Nothing found at ewp.ubereats.com: Not Vulnerable
+[+] Nothing found at edgetest.ubereats.com: Not Vulnerable
+[+] Nothing found at guest.ubereats.com: Not Vulnerable
+[+] Google Cloud: Possible takeover found at testauth.ubereats.com: Vulnerable
+[+] Nothing found at info.ubereats.com: Not Vulnerable
+[+] Nothing found at learn.ubereats.com: Not Vulnerable
+[+] Nothing found at merchants.ubereats.com: Not Vulnerable
+[+] Nothing found at guest-beta.ubereats.com: Not Vulnerable
+[+] Nothing found at merchant-help.ubereats.com: Not Vulnerable
+[+] Nothing found at merchants-beta.ubereats.com: Not Vulnerable
+[+] Nothing found at merchants-staging.ubereats.com: Not Vulnerable
+[+] Nothing found at messages.ubereats.com: Not Vulnerable
+[+] Nothing found at order.ubereats.com: Not Vulnerable
+[+] Nothing found at restaurants.ubereats.com: Not Vulnerable
+[+] Nothing found at payments.ubereats.com: Not Vulnerable
+[+] Nothing found at static.ubereats.com: Not Vulnerable
+
+Subhunter exiting...
+Results written to test.txt
+
+
+```
+