bit4woo / domain_hunter

A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件

#更强大的版本请看 https://github.com/bit4woo/domain_hunter_pro 该版本后续可能会较少更新了。

A more powerful version, please see https://github.com/bit4woo/domain_hunter_pro , this one perhaps will not be updated.

author

bit4woo

domain_hunter

A Burp Suite extender that try to find sub-domains,similar domains and related domains of an organization automatically, not only domain. Some times similar domain and related domains give you surprise^_^. that's why I care about it.

video(视频教程)

https://www.bilibili.com/video/BV1Jt4y1U7YG/

usage

1. download this burp extender from here.
2. add it to burp suite. you will see a new tab named “Domain Hunter”, if no error encountered.
3. visit your target website(or App) with burp proxy enabled, ensure burp recorded http or https traffic of your target.
4. you can just switch to the "domain hunter" tab, input the domain that you want to search and click "Search" button.
5. or you can run "Crawl" firstly to try to find more sub-domains and similar domains.

screenshot

change log

2017-07-28: Add a function to crawl all known subdomains; fix some bug.

2018-07-06: Add the ability to get related domains by get SANs object of certification.

2018-08-03: Use thread to speed up get related-domains.

2018-09-18: Optimize some steps to reduce memory usage.

2018-09-19: Update getSANs() method to void get domains of CDN provider.

2018-09-20: Update logic of getting possible https URLs that may contain related-domains

2018-09-21: Update logic of "includeInScope" and "sendToSpider" to reduces UI action time

2018-09-29: Add Upload function to support upload result to your site or system

2018-10-30: Big Change: try to find sub-domains, similar domains , related domains of an organization(enterprise), not only a domain.

2018-11-01: Add "Add to domain hunter" menu in site map tree.

2019-07-06: Use multiple thread to improve search speed. Use regex to find more domain in every response.

xmind of domain collection

Burp插件微信交流群：

domain_hunter's Issues

Java jar issue

Any plan to provide jar for java 1.7 version?

Getting below error when trying to add in burp

java.lang.UnsupportedClassVersionError: burp/BurpExtender : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at burp.sue.a(Unknown Source)
at burp.sue.(Unknown Source)
at burp.mn.a(Unknown Source)
at burp.ooh.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
The extension could not be loaded because it requires a later version of Java. To use this extension you will need to start Burp with the required or later Java version.

小建议

建议把搜集出来的域名加上协议和端口，因为有些资产使用的端口不是80或443

域名搜集不到

查询 www.nuaa.edu.cn 时没有结果

tutorial

wonderful , if add tutorial how to run it , it looks better . . .

OSError

安装
Traceback (most recent call last):
File "", line 1, in
OSError: (22, 'Invalid argument',

找组织

能拉进burp 插件微信群码

二维码已过期

二维码已过期

加微信群请看这里