github-subdomains is a Go tool designed to identify subdomains associated with a target domain on GitHub. It queries the GitHub API to find repositories and users that include potential subdomains in their code, descriptions, or other relevant fields. The tool helps security researchers and bug bounty hunters discover hidden subdomains.
This project provides a straightforward command-line interface for subdomain discovery. It supports multiple GitHub tokens and offers options for extended searches and raw output. The tool's clean design and focus on a specific task make it easy to understand and integrate into existing workflows.
- Subdomain Discovery: Searches GitHub for potential subdomains linked to a given domain.
- Token Support: Accepts multiple GitHub tokens for increased API rate limits and broader coverage.
- Flexible Output: Provides options for raw output and customizable output file names.
- Extended Mode: Includes an extended search mode to find variations like example.tld.
- Rate Limit Handling: Handles GitHub API rate limits by temporarily disabling and re-enabling tokens.
- Command-Line Interface: Offers a user-friendly command-line interface for easy operation.
- Configurable Search: Supports searching via comments, descriptions, and other fields.
The project has been actively developed and maintained since 2020, with recent updates focusing on bug fixes and improved functionality. The changelog demonstrates consistent attention to detail and responsive issue resolution. The tool is relatively mature and reliable, with a clear focus on usability and security.
Security researchers, bug bounty hunters, and developers can leverage github-subdomains to identify potential subdomain risks associated with GitHub projects. By automating the subdomain discovery process, the tool helps improve security posture and uncover hidden vulnerabilities, providing valuable insights for risk assessment and remediation.