A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件
analysis all proxy traffic to find subdomain\similar-domain of your target automatically. reduce usage of "search" button. 自动分析所有Proxy中的流量,提取你配置目标中的子域名和相似域名。减少手动search的必要
1.use multiple thread to improve search speed 2.use regex to find more domain in every response
1、使用多线程提示搜索速度 2、使用正则表达式搜索响应包中的域名,以期发现更多域名
to save domain result automatically and recover when extension loaded.
domain hunter v1.2: LEVEL UP ~~~ to find subdomains \related-domains\ similar-domains of an organization not only a domain.
Add Upload function to support upload result to your site or system
domain hunter v0.9:
update logic of getting possible HTTPS URLs that may contain related-domains.
especially, URL like this: https://202.77.129.30
update getSANs() method to void get domains of CDN provider.
this may lead to miss some related domains, eg. https://www.YouTube.com ,it's principal is *.google.com
but our target is to get useful message, so we need to do this to void CDN provider,I think it's worth~, or any good idea?
optimize some steps to reduce memory usage.
use threads to speed up getting related-domains.