SUBDOMAIN HACKING

 welcome back soda 🥤 family

   Today we will talk about subdomain enumeration and how to install a tool that can do this hacking for us


DISCLAIMER: THIS TOOL IS ONLY MEANT FOR EDUCATIONAL PURPOSE AND YOU NEED PERMISSION TO USE THIS TOOL ON ANY WEBSITE PLEASE DON'T USE THIS ILLEGALLY


Subdomain enumeration hacking is getting subdomains under a website like bypassing the robots.txt and sitemap.xml and getting other links that are not visible to a normal user subdomains like index.php,admin.php.

So let's get started


REQUIREMENTS

° You will need docker.io installed in your Kali Linux either desktop or proot distro on termux

°internet connection

°coffee


GUIDE


INSTALLATION:


° Installing docker

 [ sudo apt install docker.io ]


° To install this tool is kind of easy for Linux users you can install it by using this command

 [ sudo apt install hakwraler ]


° But for those who are not using Linux box you can install hakwraler by this command

 [ git clone https://github.com/hakluke/hakrawler

cd hakrawler

docker build -t hakluke/hakrawler .]


° you can run this simple command to run the hakwraler help 

 [ docker run --rm -i hakluke/hakrawler --help ]


° To use this very simple you can use this command to run it

 [ echo the website link | docker run --rm -i hakluke/hakrawler -subs ]


HAKWRALER help commands 

Usage of hakrawler:

  -d int

     Depth to crawl. (default 2)

  -h string

     Custom headers separated by two semi-colons. E.g. -h "Cookie: foo=bar;;Referer: http://example.com/" 

  -insecure

     Disable TLS verification.

  -json

     Output as JSON.

  -proxy string

     Proxy URL. E.g. -proxy http://127.0.0.1:8080

  -s Show the source of URL based on where it was found. E.g. href, form, script, etc.

  -size int

     Page size limit, in KB. (default -1)

  -subs

     Include subdomains for crawling.

  -t int

     Number of threads to utilise. (default 8)

  -timeout int

     Maximum time to crawl each URL from stdin, in seconds. (default -1)

  -u Show only unique urls.

shout-out to hakluke the creator of this wonderful tool I will recommend you check him on GitHub @hakluke and YouTube @hakluke

This will be a wrap on today article wonderful articles ahead so don't forget to subscribe to get notified when I realease a new article .



Post a Comment

0 Comments