Enumerate and search for potential frontable domains
Forked and updated with some additional features over the original:
- Ported to Python 3
- Recursive sub-domain enumeration and subsequent checking
- Colourising of Azure frontable domains that support TLS 1.0
- Added checks for Google's AppSpot
Based on information found here: https://www.bamsoftware.com/papers/fronting/
git clone https://github.com/PwnDexter/FindFrontableDomains.git
Run setup.sh
chmod +x setup.sh
./setup.sh
Print help
python3 FindFrontableDomains.py -h
Example Command:
python3 FindFrontableDomains.py --alexa 10000 --threads 20
Example Command:
python3 FindFrontableDomains.py --domain example.com --threads 20
Example Command:
python3 FindFrontableDomains.py --check ajax.microsoft.com
- - Add more frontable Products if the appear
- - Add more sub domain enumeration techniques
- - Add Cert Transparancy checks to get more domains