elfarsaouiomar / monitor-new-subdomain

MNS is a security and reconnaissance tool for monitoring new subdomains

                        ███╗   ███╗███╗   ██╗███████╗
                        ████╗ ████║████╗  ██║██╔════╝
                        ██╔████╔██║██╔██╗ ██║███████╗
                        ██║╚██╔╝██║██║╚██╗██║╚════██║
                        ██║ ╚═╝ ██║██║ ╚████║███████║
                        ╚═╝     ╚═╝╚═╝  ╚═══╝╚══════╝            

                        # Monitor New Subdomain
                        # @omarelfarsaoui
                        # version 1.0     

monitor-new-subdomain

Requirements

• python3
• MongoDB how to install mongodb
• vps (aws free account is enough) Create aws account
• Slack workspace (Free) Create Slack Webhook URL (optional)
• Telegram bot Create Telegram bot (optional)

Intallation

MNS needs some dependencies, to install them on your

$ git clone https://github.com/elfarsaouiomar/monitor-new-subdomain.git
$ cd monitor-new-subdomain/
$ pip3 install -r requirements.txt

Usage

add domain to monitor. E.g: domain.com

python3 check-new-subdomain.py -a  domain.com

list all domain in database

python3 check-new-subdomain.py -l

get all subdomain for specific domain

python3 check-new-subdomain.py -L domain.com

search fo new subdomain for all domains

python3 check-new-subdomain.py -m

export all subdomains form the database to txt file

python3 check-new-subdomain.py -e

import list of domains via file

each domain in line

python3 check-new-subdomain.py -i domains.txt

delete domain

python3 check-new-subdomain.py -d

send notification via slack

python3 check-new-subdomain.py -s

send notification via telegram

python3 check-new-subdomain.py -t

Docker Section

Build

docker-compose build

run containers

docker-compose up -d

you can easly eun command now inside containers

docker-compose run mns -a domain.com

Check out this video on youtube how to use MNS with docker https://www.youtube.com/watch?v=w47sCIqjAgQ

example

list all domains

monitor new subdomain

Import domains via file

mongoDB result

notification telegram

Feedback and issues

Create a new release

inspired from https://github.com/yassineaboukir/sublert

Todo

• add output file
• add Docker
• Add snyk
• add more subdomain resources
  • Certspotter
  • Virustotal
  • Sublist3r
  • Facebook **
  • Spyse (CertDB) *
  • Bufferover
  • Threatcrowd
  • Virustotal with apikey **
  • AnubisDB
  • Urlscan.io
  • SecurityTrails **
  • Threatminer

monitor-new-subdomain's Issues

Issue in Setup + Suggestions

Hey! Amazing work man!
I have a few question/suggestion + an issue i faced when i was installing and using tool:
1- Does this tool do the job of SubLert too? I mean Should i use it both or your tool is enough?
2- Can you please add a feature which we can control the tool using our telegram bot command? or even slack.
3- It would be great if we can add another enumerated subdomain list which we gathered from different sources and methods to the bot and database, so the tool monitor them too.
*** 4- Also The Most Important one, an ability to extend tool by our command would be super useful. Like the tool runs some commands we give to it (like in a text file, each command per line) beside the one you codded. e.g: Running nuclei with our custom Flags, HttpX with our custom Flags and ... after finishing the monitoring.

And the Issue part!
I face this error when i run the program. what should i do? I installed and configured MongoDB v4 completely.

➜  monitor-new-subdomain git:(main) ✗ python3 check-new-subdomain.py -l


        ███╗   ███╗███╗   ██╗███████╗
        ████╗ ████║████╗  ██║██╔════╝
        ██╔████╔██║██╔██╗ ██║███████╗
        ██║╚██╔╝██║██║╚██╗██║╚════██║
        ██║ ╚═╝ ██║██║ ╚████║███████║
        ╚═╝     ╚═╝╚═╝  ╚═══╝╚══════╝
    ## Monitor New Subdomains
    ## @omarelfarsaoui
    ## version 1.1
    
[!] command find requires authentication, full error: {'ok': 0.0, 'errmsg': 'command find requires authentication', 'code': 13, 'codeName': 'Unauthorized'}

Doesnt matter what flag i use, I always get this error. ive created a user with both full and standard access level and none of them worked.
Thanks Again!

Notify integration?

Is viable a integration with notify?

it does not work

Hi Omar,
great work. I install it, but it doesn't work.

Error

Thanks in advance.

[Feature Request] Subdomain IP Resolving

Hi there,

Just a feature request that might be a good idea - it'd be awesome to see IP resolving of the scanned subdomains implemented and possibly placed into the MongoDB, perhaps even with an option for a relevant notification to be sent if an IP on a subdomain changes.

Great job with the project overall though - very handy for my particular usecase!

Failed to connect to the mongodb

Error while running in ubuntu

Hi,

May I know how can I fix this error "[!] Expecting value: line 1 column 1 (char 0)" ?