Class: Snackhack2::Subdomains

Inherits:
Object
  • Object
show all
Defined in:
lib/snackhack2/subdomains.rb

Instance Method Summary collapse

Constructor Details

#initialize(site, wordlist: nil) ⇒ Subdomains

Returns a new instance of Subdomains.



8
9
10
11
 
# File 'lib/snackhack2/subdomains.rb', line 8

def initialize(site, wordlist: nil)
  @site     = site
  @wordlist = wordlist
end

Instance Method Details

#brute ⇒ Object 



27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/snackhack2/subdomains.rb', line 27

def brute
  found = ""
  File.readlines(wordlist).each do |l|
    s = "#{l.strip}.#{site}"
    begin
      puts File.join("https://", s)
      g = Snackhack2::get(File.join("https://", s))
      if g.code == 200
        found += s + "\n"
      elsif g.code == 300
        found += s + "\n"
      else
        puts "HTTP Code: #{g.code}"
      end
    rescue => e
      puts e
    end
  end
  Snackhack2::file_save(@site, "subdomain_brute", found)
end

#resolv(sd) ⇒ Object 



48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'lib/snackhack2/subdomains.rb', line 48

def resolv(sd)
  # NOTE: this is really slow & multi thread does not work
  # due to resolv
  active = []
  subdomains = []
  Resolv::DNS.open do |dns|
    ress = dns.getresources "#{sd}.#{@site}", Resolv::DNS::Resource::IN::A
    unless ress.map(&:address).empty?
      address = ress.map(&:address)
      unless active.include?(address)
        active << address
        subdomains << "#{sd}.#{@site}" unless subdomains.include?(sd)
      end
    end
  end
  host = URI.parse(@site).host
  File.open("#{host}_subdomains.txt", 'w+') { |file| file.write(subdomains.join("\n")) }
  File.open("#{host}_ips.txt", 'w+') { |file| file.write(active.join("\n")) }
end

#run ⇒ Object 



21
22
23
24
25
 
# File 'lib/snackhack2/subdomains.rb', line 21

def run
  File.readlines(wordlist).each do |sd|
    resolv(sd)
  end
end

#site ⇒ Object 



13
14
15
 
# File 'lib/snackhack2/subdomains.rb', line 13

def site
  @site.gsub("https://", "")
end

#wordlist ⇒ Object 



17
18
19
 
# File 'lib/snackhack2/subdomains.rb', line 17

def wordlist
  File.join(__dir__, 'lists', 'subdomains.txt')
end