This is just a simple instruction on compiling the project. More details will be added later.
4
-
The Steps are easy since the project doesn't have many dependancies for now & only uses Qt-Creator/qmake for the whole build process.
4
+
The Steps are easy since the project doesn't have many dependancies for now & only uses QtCreator/qmake for the whole build process.
5
5
6
6
## Prerequisites
7
7
8
-
1. Download [Qt5.13.0](https://download.qt.io/archive/qt/5.13/5.13.0) & install. (other versions can be used butyouhavemakeminoradjustmentshere & there).
8
+
1. Download [Qt5.13.0](https://download.qt.io/archive/qt/5.13/5.13.0) & install. (other versions can be used,i'veonlytestedinQt5.13 & Qt5.12).
9
9
2. Download [Qt Creator 4.9.1](https://www.qt.io/offline-installers) & install. (not a must to use version 4.9.1).
10
10
3. Clone the repository (`main or dev branch`) to your local drive. Make sure to include the submodules in your clone command!
11
11
skipped 13 lines
25
25
26
26
## Minor adjustment
27
27
28
-
Minor adjustment to the GumboParser submodule.
28
+
Minor adjustment to the gumbo-parser submodule.
29
29
1. Copy the `strings.h` file from `sub3suite/include/`
30
30
2. Paste it to `sub3suite/include/gumbo-parser/src/`
31
31
3. Change the Include header file `#include <strings.h>` to `#include "strings.h"` for the following files;
skipped 39 lines
71
71
```
72
72
73
73
## Run
74
-
The required dynamic/shared libraries for this project are `Qt5Core`, `Qt5Gui`, `Qt5Network` & `Qt5Widgets`. You can obtain them
75
-
from the Qt installation folder (Make sure you get the appropriate versions).
76
74
77
-
The folder `sub3suite/bin` contains all the necessary files required by the sub3suite program. Copy the Qt libraries and the built sub3suite
78
-
application into this folder and run!.
75
+
The folder `sub3suite/bin` contains all the necessary files required by the sub3suite program. Copy the relevantQt librariestoappropriatelocations and the built sub3suite
sub3suite is a research-grade suite of tools for subdomain enumeration andgeneralosintinformationgathering. Supports both
9
-
manual and automated analysis on targets with many available feautues.Youcanfindmoreinformationonthe[blog](https://3nock.github.io/sub3suite)!
8
+
sub3suite is a research-grade suite of tools for subdomain enumeration,OSINTinformationgathering&attacksurfacemapping. Supports both
9
+
manual and automated analysis on targets with many available feautues &tools.
10
10
11
11
## ScreenShots
12
12
<img src="docs/images/screenshot_osint.png"/>
skipped 7 lines
20
20
**Are you a developer?**
21
21
22
22
Check out the [open issues](https://github.com/3nock/sub3suite/issues) and many scattered `TODO` messages throughout the source code.
23
+
24
+
**Are you a designer?**
25
+
26
+
You can help design an even more intuitive UI, Logos & Icons.
23
27
24
28
**Not a developer?**
25
29
26
-
You can help by reporting [bugs](https://github.com/3nock/sub3suite), requesting [features](https://github.com/3nock/sub3suite), providing[translations](https://github.com/3nock/sub3suite) and sharing this project.
30
+
You can help by reporting [bugs](https://github.com/3nock/sub3suite), requesting [features](https://github.com/3nock/sub3suite), [sponsoring](SPONSOR.md) theproject,writingblogposts& sharing this projecttopeers.
27
31
28
32
For More information see [contribution guide](CONTRIBUTING.md).
29
33
skipped 3 lines
33
37
2. Unzip.
34
38
3. Run.
35
39
40
+
**NOTE**
41
+
On windows install the msvc-redistributable package `sub3suite/vcredist_x64.exe` or `sub3suite/vcredist_x86.exe` if the program fails to run.
42
+
43
+
36
44
You can also [compile](COMPILING.md) sub3suite yourself with a few easy steps!
37
45
38
46
## Credits
39
47
40
-
- HTML parser by Google's [GumboParser](https://github.com/google/gumbo-parser)
48
+
- HTML parser by Google's [gumbo-parser](https://github.com/google/gumbo-parser)
41
49
- Crash-Handler by Google's [breakpad](https://github.com/google/breakpad)
The Active Engine performs enumeration on target hostnames to determine active ones.<br><br>
4
5
5
6
The Tool performs this enumeration using multiple techniques;<br>
skipped 19 lines
25
26
26
27
<br> <a href=https://github.com/3nock/sub3suite>Help improve the documentation...</a><br>
27
28
28
-
<h2> Blog Posts </h2>
29
-
30
29
<h2> References </h2>
31
30
31
+
<h2> NOTE: </h2><br>
32
+
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
33
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
The BRUTE Engine performs subdomain & TLD enumeration by bruteforce.<br>
4
5
Performs DNS lookup on subdomain & TLD created by appending the words from wordlist to the
5
6
target.<br>
skipped 22 lines
28
29
29
30
<br> <a href=https://github.com/3nock/sub3suite>Help improve the documentation...</a><br>
30
31
31
-
<h2> Blog Posts </h2>
32
-
33
32
<h2> References </h2>
34
33
34
+
<h2> NOTE: </h2><br>
35
+
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
36
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
The DNS Engine resolves targets into specified DNS Records.<br>
4
5
This Tool uses multiple threads as alocated by the user to perform enumeration on targets
5
6
also support use of multiple nameservers as provided by the user or default list by s3s.<br><br>
skipped 23 lines
29
30
30
31
<br> <a href=https://github.com/3nock/sub3suite>Help improve the documentation...</a><br>
31
32
32
-
<h2> Blog Posts </h2>
33
-
34
33
<h2> References </h2>
35
34
35
+
<h2> NOTE: </h2><br>
36
+
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
37
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
60
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
41
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
The SSL Engine performs an encrypted connection to target and pulls the target's SSL Certificate to
4
-
obtain valuable information from the certificates.<br><br>
3
+
<h2> What is? </h2>
4
+
<p style="color:white">
5
+
<b> SSL/TLS - </b> SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), are protocols for establishing authenticated and encrypted links between networked computers.
6
+
Although the SSL protocol was deprecated with the release of TLS 1.0 in 1999, it is still common to refer to these related technologies as "SSL" or "SSL/TLS".
The Tool returns results as SSL Certificates full info, SSL Cert Hash(sha1 && sha256) & SSL alternative names.<br><br>
9
+
<b> SSL Certificates - </b> SSL certificates make SSL/TLS encryption possible, and they contain the website's public key and the website's identity, along with related information.
10
+
Devices attempting to communicate with the origin server will reference this file to obtain the public key and verify the server's identity. The private key is kept secret and secure.
This Tool uses multiple threads as alocated by the user to perform enumeration.
13
+
<b> SSL Engine - </b> Is used to enumerate SSL Certificates from targets by actively establishing encrypted connection to the target and pulling the obtained SSL Certificate to
14
+
obtain all relevant information stored in the certificate that can be useful to map the target.<br>
15
+
SSL Certificates store important information such as:<br>
16
+
1. Associated domains.<br>
17
+
2. Organization name & contacts.<br>
18
+
3. Issued & Expirely date of the certificate. etc<br><br>
9
19
20
+
sub3suite's SSL Engine pulls all the data from the SSL Certificate and present it in a very intuitive manner.
21
+
The Tool returns results as SSL Certificates full info, SSL Cert Hash(sha1 && sha256) & SSL alternative names.<br><br>
10
22
23
+
This Tool uses multiple threads as alocated by the user to perform enumeration.
24
+
</p>
11
25
<h2> Features </h2>
12
26
1. Supports multiple Targets connections in one scan using multiple threads.<br>
13
27
2. Supports enumeration by connecting to host on specified ports eg (HTTP, HTTPS, FTP etc.).<br>
skipped 5 lines
19
33
20
34
<br> <a href=https://github.com/3nock/sub3suite>Help improve the documentation...</a><br>
21
35
22
-
<h2> Blog Posts </h2>
23
-
24
36
<h2> References </h2>
25
37
38
+
<h2> NOTE: </h2><br>
39
+
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
40
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<b> URL - </b> Uniform Resource Locator, colloquially termed a web address, is a reference to a web resource that specifies its location on a computer network and a mechanism for retrieving it.
7
+
A URL is a specific type of Uniform Resource Identifier (URI), although many people use the two terms interchangeably.
8
+
URLs occur most commonly to reference web pages (http/https) but are also used for file transfer (ftp), email (mailto), database access (JDBC), and many other applications.
<b> URL Engine - </b> Is used to enumerate most relevant information about a given URL by querying it and obtainig results from the reponse.
12
+
</p>
13
+
14
+
<h2> Features </h2>
15
+
16
+
<h2> Usage & Examples </h2>
17
+
18
+
<h2> References </h2>
19
+
20
+
<h2> NOTE: </h2><br>
21
+
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
22
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
13
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
13
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
13
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
13
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
13
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
17
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>
<b> SSL/TLS - </b> SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), are protocols for establishing authenticated and encrypted links between networked computers.
6
+
Although the SSL protocol was deprecated with the release of TLS 1.0 in 1999, it is still common to refer to these related technologies as "SSL" or "SSL/TLS".
<b> SSL Certificates - </b> SSL certificates make SSL/TLS encryption possible, and they contain the website's public key and the website's identity, along with related information.
10
+
Devices attempting to communicate with the origin server will reference this file to obtain the public key and verify the server's identity. The private key is kept secret and secure.
<b> SSL Enumerator - </b> Is used to enumerate SSL Certificates from targets by passively querying Certificate's hash (sha1 or sha256) to OSINT sources that has SSL Certificates resources such as <a href=https://crt.sh/> crt.sh </a> and pulling the obtained SSL Certificate to
14
+
obtain all relevant information stored in the certificate that can be useful to map the target.<br>
15
+
SSL Certificates store important information such as:<br>
16
+
1. Associated domains.<br>
17
+
2. Organization name & contacts.<br>
18
+
3. Issued & Expirely date of the certificate. etc<br><br>
19
+
20
+
sub3suite's SSL Enumerator pulls all the data from the SSL Certificate and present it in a very intuitive manner.
21
+
</p>
22
+
23
+
<h2> Features </h2>
24
+
25
+
<h2> Usage & Examples </h2>
26
+
27
+
<h2> References </h2>
28
+
29
+
<h2> NOTE: </h2><br>
30
+
<i> This is a very simple documentation on the Tool. It still doesn't contain many information on the many features of the tool & on how to effectively use the tool.<br>
31
+
Help improve the <a href=https://github.com/3nock/sub3suite_doc> documentation </a>.</i>