pentestpad / subzy

Subdomain takeover vulnerability checker

Subzy

Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz

Installation

go install -v github.com/LukaSikic/subzy@latest

If $GOBIN and $GOPATH are properly set, execute the program as:

$ subzy --help
Subdomain takeover tool

Usage:
  subzy [command]

Available Commands:
  help        Help about any command
  run         Run subzy
  update      Update local fingerprints.json file
  version     Print subzy version

Flags:
  -h, --help   help for subzy

Use "subzy [command] --help" for more information about a command.

If you get an error exec format error: ./subzy, you need to install Golang for your OS and compile the program by running go build -o subzy main.go which will generate new subzy binary file

Options

Only required flag for run subcommand(r short version) is either --target or --targets

--target (string) - Set single or multiple (comma separated) target subdomain/s
--targets (string) - File name/path to list of subdomains
--concurrency (integer) - Number of concurrent checks (default 10)
--hide_fails (boolean) - Hide failed checks and invulnerable subdomains (default false)
--https (boolean) - Use HTTPS by default if protocol not defined on targeted subdomain (default false)
--timeout (integer) - HTTP request timeout in seconds (default 10)
--verify_ssl (boolean) - If set to true, it won't check site with invalid SSL

Usage

Target subdomain can have protocol defined, if not http:// will be used by default if --https not specifically set to true.

• List of subdomains

  • ./subzy run --targets list.txt

• Single or multiple targets

  • ./subzy run --target test.google.com
  • ./subzy run --target test.google.com,https://test.yahoo.com

Command aliases

Each subzy subcommand has its own short version. Running subzy version or subzy v is the same.

• run - r
• update - u
• version - v

subzy's Issues

cannot find package "github.com/lukasikic/subzy"

here is the details oof the error....

sudo go install -v github.com/lukasikic/subzy
cannot find package "github.com/lukasikic/subzy" in any of:
/usr/lib/go-1.15/src/github.com/lukasikic/subzy (from $GOROOT)
/root/go/src/github.com/lukasikic/subzy (from $GOPATH)

Error processing: Process: Fingerprints: unexpected end of JSON input

After installing I am getting this error

Error

lukasikic/[email protected]/subzy.go:4:2: local import "./src" in non-local package lukasikic/[email protected]/src/process.go:5:2: cannot find package

Fingerprint missing Takeovers

Hey Lukasikic,

I really love subzy. Will there be an update for the missing fingerprint domains from https://github.com/EdOverflow/can-i-take-over-xyz ?

Thank you !

Error processing: Process: Fingerprints: unexpected end of JSON input

When I give the following command, I get an error.

$ subzy -targets findomain_subd.txt
2021/05/05 05:17:56 Error processing: Process: Fingerprints: unexpected end of JSON input

unable to run subzy with out absolute path

I have just install subzy . I'm using go 1.18 version. my go apth env is set as well. even I did export GOPATH=$HOME/go and
found that i have go/bin/subzy on path as well. But when I run subzy it does not find it. If I use /home/myuser/go/bin/subzy it is working fin.

Any idea what went wrong?

how install Subzy in Windows 10

how install Subzy in Windows 10 ?

go get: installing executables with 'go get' in module mode is deprecated. Use 'go install pkg@version' instead.

When i try to install subzy through sudo go get -u -v github.com/lukasikic/subzy command getting this error please guide me on this .

Please update with output json file..

please update with new feature output json file,

Thanks

To not installing

┌──(kali㉿kali)-[~]
└─$ sudo go install -v github.com/lukasikic/subzy@latest
go: finding module for package github.com/mitchellh/go-homedir
go: finding module for package github.com/logrusorgru/aurora
go: found github.com/logrusorgru/aurora in github.com/logrusorgru/aurora v2.0.3+incompatible
go: found github.com/mitchellh/go-homedir in github.com/mitchellh/go-homedir v1.1.0

Fingerprint for Gemfury is overly broad

Hey there,

First off: thank you for this great tool.

It seems that the fingerprint for Gemfury is overly broad, and can likely be improved. https://github.com/LukaSikic/subzy/blob/master/runner/fingerprints.json#L285 "404: This page could not be found." applies to many 'normal' websites which are completely unrelated to Gemfury.

Is it possible to multiple fingerprints that must match on a page? "404: This page could not be found." and "RubyGems", perhaps?

Cheers

Cleaner output

I think it would be great if we could specify an option that returns the output without colors and extra information. For example:

VULNERABLE|subdomain.domain.com
NOT VULNERABLE|subdomain1.domain.com

An option that only outputs vulnerable subdomains would be nice as well.

error after runnig tool - Error: Process: Fingerprints: invalid character ':' after top-level value

getting error after running the tool with the bellow command

subzy r --target test.google.com

Error: Process: Fingerprints: invalid character ':' after top-level value

Not able to install subzy

I am not able to install subzy in my mac as well as kali linux because of the issue below :

"go: found github.com/logrusorgru/aurora in github.com/logrusorgru/aurora v2.0.3+incompatible"

I have also attached the screenshot , please help me installing the same

.

Not able to run app on Kali 2019.01

Hi!

Thank you for the great tool.

I've it installed on my Kali VM running 2019.01 and have not been successful using the tool in the last 2 days. Followed the instruction to clone the git repository and when issuing the command ./subzy or sudo bash subzy, getting the below error messages:

subzy ‹master›
╰─➤ ./subzy
zsh: exec format error: ./subzy

subzy ‹master›
╰─➤ sudo bash subzy
subzy: subzy: cannot execute binary file

Kindly suggest the way to rectify the same.

Thanks

Is there a way to check A records?

Hi.

Is there a way to check A records?

or Only CNAME check?

Thanks.

Killed

when i run this command "subzy run --targets /home/admin/all.txt
" then the terminal just stop and not responding for any command .
then the "Killed" word is output

Fingerprints Update

Hey Buddy, I think you have to update fingerprints based on Documentation on can-i-take-over-xyz, we are missing some takeover on the last updated fingerprints.json

Not able to detect

Its only showing Unbounce as vulnerable, can you please help.

Thank You

subzy.go:6:2: cannot find package

I'm using go version go1.18.4 on Kali Linux. I get the following error when I run, sudo go build subzy.go

subzy.go:6:2: cannot find package "github.com/lukasikic/subzy/src" in any of:
/usr/local/go/src/github.com/lukasikic/subzy/src (from $GOROOT)
/root/go/src/github.com/lukasikic/subzy/src (from $GOPATH)

HTTP error

why I'm getting this error:

not able to install subzy

go install -v github.com/lukasikic/subzy
go install: version is required when current directory is not in a module
Try 'go install github.com/lukasikic/subzy@latest' to install the latest version

Not Vulnerable Domain showing as Vulnerable

Hi team,

When i am running subzy i am getting output as Vulnerable to takeover though it have Not Vulnerable status in fingerprint.json
I am getting Vulnerable takeover of Unbounce and Acquia only.All other things are fine.

fingerprint.json

{
    "Engine": "Unbounce",
    "Status": "Not vulnerable",
    "Fingerprint": "The requested URL was not found on this server",
    "Discussion": "https://github.com/EdOverflow/can-i-take-over-xyz/issues/11",
    "Documentation": "Not available",
    "False_Positive": [
      "That’s all we know."
    ]
}

subzy not working

may i know whether subzy is working tool are not.if its working may i know what is the problem why it is not working for me.

Unable to run the tool

/subzy -target=list.txt -https
[ * ] Loaded 1 targets
[ Yes ] HTTPS by default (--https)
[ 10 ] Concurrent requests (--concurrency)
[ No ] Check target only if SSL is valid (--verify_ssl)
[ 10 ] HTTP request timeout (in seconds) (--timeout)
[ No ] Show only potentially vulnerable subdomains (--hide_fails)
🔥 Good luck 🔥
[ HTTP ERROR ] - list.txt

how to fix this.

Can install - unexpected directory layout

GOROOT and GOPATH are correct. Not sure what is causing this/
I'm using Kali for this.

unexpected directory layout:
import path: _/root/go/src/github.com/lukasikic/subzy/src
root: /root/go/src
dir: /root/go/src/github.com/lukasikic/subzy/src
expand root: /root/go
expand dir: /root/go/src/github.com/lukasikic/subzy/src
separator: /

subzy: command not found

can't run it and when installed manually asked : go: updates to go.mod needed; to update it:
go mod tidy