github-subdomains

Find subdomains on GitHub.

Description

This Go tool performs searches on GitHub and parses the results to find subdomains of a given domain.

Install

go install github.com/DEMON1A/github-subdomains@latest

or

git clone https://github.com/DEMON1A/github-subdomains
cd github-subdomains
go install

Update an existing github-subdomains binary

git clone https://github.com/DEMON1A/github-subdomains
cd github-subdomains
go build -o gs 
mv gs $(whereis github-subdomains | cut -d ":" -f 2) # use sudo if required

Usage

$ github-subdomains -h

Usage of github-subdomains:
  -d string
    	domain you are looking for (required)
  -e	extended mode, also look for <dummy>example.<tld>
  -k	exit the program when all tokens have been disabled
  -o string
    	output file, default: <domain>.txt
  -raw
    	raw output
  -t string
    	github token (required), can be:
    	  • a single token
    	  • a list of tokens separated by comma
    	  • a file (.tokens) containing 1 token per line
    	if the options is not provided, the environment variable GITHUB_TOKEN is readed, it can be:
    	  • a single token
    	  • a list of tokens separated by comma
  -w int
        time to wait for github api to respond ~ in seconds ~ (default 10)

If you want to use multiple tokens, you better create a .tokens file in the executable directory with 1 token per line

token1
token2
...

or use an environment variable with tokens separated by comma:

export GITHUB_TOKEN=token1,token2...

Tokens are disabled when GitHub raises a rate limit alert, however they are re-enable 1mn later. You can disable that feature by using the option -k.

Todo

• change the order of the extra searches ?
• ?

Changelog

02/12/2024

• add a custom flag -w for how long should gh wait for github's api

20/09/2022

• fix regexp for subdomains

25/09/2020

• quick mode added
• tokens can be read from any file

23/09/2020

• fixed an issue in the api call (params name)
• added binary

12/08/2020

• improved clean function

06/08/2020

• max_page set forced to 10 to save 1 request for every search
• new banner (easier to maintain)
• removed _ from the regexps
• extended regexp fixed
• improved cleaning function

05/08/2020

• added an option to exit the program when all tokens have been disabled instead of waiting
• rate limited tokens are disabled for 1mn then re-enabled
• removed options for languages and noise
• better page management
• panic errors handled

04/08/2020

• moved default languages and noise to source code
• added an option for languages and noise
• bug fixed in searches with language and noise (empty keyword)
• added search signature to avoid duplicate searches with noise
• file loading rewritten
• preview image added

03/08/2020

• fixed delay changed 100 -> 200
• removed useless debug messages

Feel free to open an issue if you have any problem with the script.