Certificate Explore - find subdomains using Certificate Transparency logs
Certificate Explore - find subdomains using Certificate Transparency logs.
This tool is slightly improved version of UnaPibaGeek/ctfr.
crtxplore.py [-h] -d DOMAIN [-ew] [-ee] [-t TIMEOUT] [-o OUTPUT_FILE_PATH]
arg | Name | Description |
---|---|---|
-d |
domain | Target domain (required) |
-ew |
exclude_wildcard | Exclude wildcard subdomains (eg. *.uber.com) |
-ee |
exclude_expired | Exclude expired certificates |
-t |
timeout | Timeout |
-o |
output | Output file path |
> python crtxplore.py -d uber.com -ew -t 5
automate.sandbox.cpe.uber.com
prj.usuppliers.uber.com
cn-slow2.uber.com
accessibility.uber.com
brand.uber.com
dca1-resilient.corp.uber.com
cn-slow1.uber.com
investor.uber.com
prod2.uber.com
jira.uber.com
dca1-dc07.corp.uber.com
bizblog.uber.com
stapler.uber.com
...