• EyeWitness
  • SecList (DNS Recon List)
  • LevelUp All.txt Subdomain List

Example 3: — Applications subdomain example.com with large-all.txt bruteforcing (massdns, subbrute, Sublist3r, Amass, enumall and SubFinder)
–install/–upgrade Both do the same function — install all requisite tools

python domained.py -d example.com –noeyewitness
Example 4: — Uses subdomain example.com and only Amass and SubFinder
Note: –bruteall must be used with the -b flag

–vpn Check if you are on VPN (update with your provider)
–fast Use ONLY Amass and SubFinder
–bruteall Bruteforce with JHaddix All.txt List Rather than SecList
–fresh Delete old data from output
–notify Send Pushover or Gmail Notifications
–active EyeWitness Active Scan
–noeyewitness No Eyewitness
-Id the domain name you want to preform recon on
-b Bruteforce with subbrute/massdns and SecList wordlist
-s Only HTTPs domains
-p Insert port 8080 for HTTP and 8443 for HTTPS

Domained is a multi tool subdomain enumeration tool that utilizes wordlists and several subdomain enumeration tools to make a unique list of subdomains which are passed for reporting to EyeWitness.
This produces server response headers, screenshots and touch based default credential checkingaccount. It’s written in Python heavily leveraging Recon-ng.
Or read more here.

You can download Domained here:
Example 1 — Applications subdomain example.com (Sublist3r (+subbrute), enumall, Knock, Amass, and SubFinder)
Subdomain Enumeration Examples
domained-master. Zip

Example 5: — Uses subdomain example.com, just Amass and SubFinder and notification
Sudo pip install -r. /ext/requirements.txt
Example 6: — Uses subdomain example.com with no EyeWitness
Python domained.py -d example.com –fast
First Steps would be to install Python modules and resources:

Example 2: — Uses subdomain example.com with seclist subdomain list bruteforcing (massdns, subbrute, Sublist3r, Amass, enumall, and SubFinder), adds ports 8443/8080 and tests if on VPN

Sudo python domained.py –install

Python domained.py -d example.com –quick –notify
Read the remainder of Domained – Multi Tool Subdomain Enumeration today! Available at Darknet.

Reporting + Wordlists:

Subdomain Enumeraton Tools:

  • Sublist3r
  • enumall
  • Assessing
  • Subbrute
  • massdns
  • Recon-ng
  • Amass
  • SubFinder

Python domained.py -d example.com