Subdomains.Sh – Wrapper Around Tool used to find Subdomains

Subdomains are the part of the main domain that comes before the main domain name and domain extension. The functionality of web applications is been divided into various subdomains. In cyber-security subdomains plays an important role, as the bugs which are not detected in the main domain can be identified in the subdomains. Getting a detailed list of all subdomains manually will be a challenging task. So to automate the process, we can use Subdomains.sh tool which is used to find the subdomains for the main domain. This tool is developed in the bash language and has the potential to find the subdomains and display them on the terminal itself or can be saved in the text file for further use. In this article, we will be going through the installation of the Subdomains.sh tool and exploring some examples for better understanding.

Features of Subdomain.sh tool:

•  Subdomain.sh finds subdomains with a status code(99% Correct).
•  Subdomain.sh does DNS Lookup for all the Sub-Domains it finds.
•  Subdomain.sh also finds subdomain’s website titles.
•  Subdomain.sh is automatic and it tells interesting sub-domains that may be useful.

Installation

Step 1: Execute the below command in the Linux terminal to get the Subdomain.sh tool repository in the system.

git clone https://github.com/YashGoti/Subdomain.git

Step 2: Navigate to Subdomain.sh directory by using the following command.

cd subdomain.sh

The tool has been installed successfully. Now we will see the actual usage of tools in terms of various examples.

Usage of Subdomain.sh tool

Example 1: Use the subdomain.sh script to find the subdomain of a domain. 

./subdomain.sh geeksforgeeks.org

We have got subdomains of the geeksforgeeks.org domain.

Example 2: Use the subdomain.sh script to find the subdomain of a domain.

./subdomain.sh google.com

We have got subdomains of google.com domain.