# crtfinder

**Repository Path**: delete_user/crtfinder

## Basic Information

- **Project Name**: crtfinder
- **Description**: Fast tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com with standard and advanced search techniques
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: v2
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-01-24
- **Last Updated**: 2021-10-20

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# crtfinder v2 
Here's the new version of CrtFinder tool which collect subdomains from crt.sh. 

The new update come with more scripts which collect more and more subdomains form the same site but in more intelligence techniques <3 


![intro](https://github.com/eslam3kl/crtfinder/blob/v2/intro.png)

-----------------------------------------

### How to install 
` pip install -r requirments.txt`

-----------------------------------------


### How to use it 
#### 1. Starndard search 
` python crtfinder.py -u domain.com `

This will come back with the subdomains from search keywords:
```
%.domain.com
domain.% 
```
and the output file will be `domain.txt` which will contain the results. 

#### 2. Advanced search 
` python dig.py domain.txt | tee -a more_subdomains.txt` 

this step will take more time but it will get more and more subdomains 

/!\ Note: Don't change the text file name and use the one which get back from the first step (domain.txt)

-----------------------------------------
#### Note
If you need to increase the speed in the advanced mode so edit the code of ` repeat_crt.py ` script and delete the comment at the end of it, but you must have good CPU for Multi-threading. 


### Case study

Website `dell.com`
 
**Standard serach ~ 4000 subdomain**

**Advanced search ~ 13000 subdomain**