Skip to content
This repository has been archived by the owner on Dec 14, 2021. It is now read-only.

subdomains also included in urls by waybackurls in extractor.sh #20

Open
swajyadip1997 opened this issue Dec 9, 2020 · 4 comments
Open

Comments

@swajyadip1997
Copy link

swajyadip1997 commented Dec 9, 2020

To do not include subdomains of targets in waybackurls "-no-subs" flag need to use.
The resulting command will be " waybackurls -no-subs $1 "

Selection_006

@harsh-bothra
Copy link
Owner

Hi, While extracting the URLs from Wayback and gau we are considering subdomains as well to automate further for XSS and other automation workflows. Do you have any specific reason why it's not a good idea to include subdomains?

@swajyadip1997
Copy link
Author

Sometime the subdomains included are not owned by targets, sometimes it gives false positive and also possible of going out of scope.

@swajyadip1997
Copy link
Author

False positive in sense they do not resolved

@swajyadip1997
Copy link
Author

One suggestion , we can run extractor.sh for all in scope subdomains.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants