+
+## Description:
+
+Subdomain takeover is a common vulnerability that allows an attacker to gain control over a subdomain of a target domain and redirect users intended for an organization's domain to a website that performs malicious activities, such as phishing campaigns,
+stealing user cookies, etc. It occurs when an attacker gains control over a subdomain of a target domain.
+Typically, this happens when the subdomain has a CNAME in the DNS, but no host is providing content for it.
+Subhunter takes a given list of subdomains and scans them to check this vulnerability.
+
+## Features:
+
+- Auto update
+- Uses random user agents
+- Built in Go
+- Uses a fork of fingerprint data from well known sources ([can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz/blob/master/README.md))
+
+## Installation:
+
+### Option 1:
+
+[Download](https://github.com/Nemesis0U/Subhunter/releases) from releases
+
+### Option 2:
+Build from source:
+
+ $ git clone https://github.com/Nemesis0U/Subhunter.git
+ $ go build subhunter.go
+
+## Usage:
+
+### Options:
+
+```
+Usage of subhunter:
+ -l string
+ File including a list of hosts to scan
+ -o string
+ File to save results
+ -t int
+ Number of threads for scanning (default 50)
+ -timeout int
+ Timeout in seconds (default 20)
+```
+
+### Demo (Added fake fingerprint for POC):
+
+```
+./Subhunter -l subdomains.txt -o test.txt
+
+ ____ _ _ _
+ / ___| _ _ | |__ | |__ _ _ _ __ | |_ ___ _ __
+ \___ \ | | | | | '_ \ | '_ \ | | | | | '_ \ | __| / _ \ | '__|
+ ___) | | |_| | | |_) | | | | | | |_| | | | | | | |_ | __/ | |
+ |____/ \__,_| |_.__/ |_| |_| \__,_| |_| |_| \__| \___| |_|
+
+
+A fast subdomain takeover tool
+
+Created by Nemesis
+
+Loaded 88 fingerprints for current scan
+
+-----------------------------------------------------------------------------
+
+[+] Nothing found at www.ubereats.com: Not Vulnerable
+[+] Nothing found at testauth.ubereats.com: Not Vulnerable
+[+] Nothing found at apple-maps-app-clip.ubereats.com: Not Vulnerable
+[+] Nothing found at about.ubereats.com: Not Vulnerable
+[+] Nothing found at beta.ubereats.com: Not Vulnerable
+[+] Nothing found at ewp.ubereats.com: Not Vulnerable
+[+] Nothing found at edgetest.ubereats.com: Not Vulnerable
+[+] Nothing found at guest.ubereats.com: Not Vulnerable
+[+] Google Cloud: Possible takeover found at testauth.ubereats.com: Vulnerable
+[+] Nothing found at info.ubereats.com: Not Vulnerable
+[+] Nothing found at learn.ubereats.com: Not Vulnerable
+[+] Nothing found at merchants.ubereats.com: Not Vulnerable
+[+] Nothing found at guest-beta.ubereats.com: Not Vulnerable
+[+] Nothing found at merchant-help.ubereats.com: Not Vulnerable
+[+] Nothing found at merchants-beta.ubereats.com: Not Vulnerable
+[+] Nothing found at merchants-staging.ubereats.com: Not Vulnerable
+[+] Nothing found at messages.ubereats.com: Not Vulnerable
+[+] Nothing found at order.ubereats.com: Not Vulnerable
+[+] Nothing found at restaurants.ubereats.com: Not Vulnerable
+[+] Nothing found at payments.ubereats.com: Not Vulnerable
+[+] Nothing found at static.ubereats.com: Not Vulnerable
+
+Subhunter exiting...
+Results written to test.txt
+
+
+```
+
diff --git a/banner.png b/banner.png
new file mode 100644
index 0000000000000000000000000000000000000000..d293b4a886e4116a1f3a0476eb95580fc74f3b1a
GIT binary patch
literal 11626
zcmZ{K2|SeR_xP0JmLj)BS#P>gmn@AX!&pLY5wfp?#Msw{8f&Q(;&zoK1|>0!LH5xg
z3O5X87Q1W>?`tc)WElRh>fZ0YpWo;I&gb(!=RMDP&U2pgoadSIoafv#Gcnw|TVyu^
zf!KTgcYSjNVuvvTvF*!G+hI&$vjU7j@Lo1D)JJS?{c@=VDG0The page you are looking for doesn't exist or has been moved.
"] + }, + { + "service": "Kajabi", + "cname": ["endpoint.mykajabi.com"], + "fingerprint": ["The page you're looking for doesn't exist."] + }, + { + "service": "Aha", + "cname": ["ideas.aha.io"], + "fingerprint": ["There is no portal here ... sending you back to Aha!"] + }, + { + "service": "Brightcove", + "cname": ["brightcovegallery.com", "gallery.video", "bcvp0rtal.com"], + "fingerprint": ["
Error Code: 404
"] + }, + { + "service": "Bigcartel", + "cname": ["bigcartel.com"], + "fingerprint": ["