subtake

package
v0.0.0-...-e38a4aa Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Feb 12, 2021 License: Apache-2.0 Imports: 13 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func Identify

func Identify(subdomain string, forceSSL bool, timeout int, fingerprints []Fingerprints) (service string)

* This function aims to identify whether the subdomain * is attached to a vulnerable cloud service and able to * be taken over.

func Process

func Process(o *Options)

Start processing from the defined options.

func VerifyCNAME

func VerifyCNAME(subdomain string, config []Fingerprints) (match bool)

* Triage step to check whether the CNAME matches * the fingerprinted CNAME of a vulnerable cloud service.

Types

type Fingerprints

type Fingerprints struct {
	Service     string   `json:"service"`
	Cname       []string `json:"cname"`
	Fingerprint []string `json:"fingerprint"`
	Nxdomain    bool     `json:"nxdomain"`
	Checks      Verify   `json:"verify"`
}

type Options

type Options struct {
	Domains string
	Threads int
	Timeout int
	Output  string
	Ssl     bool
	All     bool
	Verbose bool
	Config  string
}

type Results

type Results struct {
	Subdomain  string `json:"subdomain"`
	Vulnerable bool   `json:"vulnerable"`
	Service    string `json:"service,omitempty"`
	Domain     string `json:"nonexist_domain,omitempty"`
}

type Subdomain

type Subdomain struct {
	Url string
}

type Verify

type Verify struct {
	Body  string `json:"body"`
	Size  int    `json:"size"`
	Ssl   bool   `json:"ssl"`
	Cname bool   `json:"cname"`
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL