Anubis - Subdomain Enumeration 01-22-2018, 08:24 PM
#1
Anubis - Tool to enumerate subdomains
Anubis is a subdomain enumeration and information gathering tool.
Features
Anubis collates data from a variety of sources, including :
HackerTarget
DNSDumpster
x509 certs
VirusTotal
Pkey
NetCraft
Anubis also has a sister project, AnubisDB, which serves as a centralized repository of subdomains.
Usage
-t --target set target (comma separated, no spaces, if multiple)
-n --with-nmap perform an nmap service/script scan
-o --output save to filename
-i --additional-info show additional information about the host from Shodan (requires API key)
-s --ssl run an ssl scan and output cipher + chain info
-p --ip outputs the resolved IPs for each subdomain, and a full list of unique ips
-b --brute-force attempts to use a common word list to find subdomains (usually not very succesful)
-a --send-to-anubis-db send results to Anubis-DB
-r --recursive recursively search over all subdomains
-w --overwrite-nmap-scan SCAN overwrite default nmap scan (default -nPn -sV -sC)
-v --verbose print debug info and full request output
-q --queue-workers NUM override number of queue workers (default: 10, max: 100)
--version show version and exit
*possible subdomains below*
FBI - left | NSA - right
![[Image: N5eKobU.png]](https://i.imgur.com/N5eKobU.png)
![[Image: N5eKobU.png]](https://i.imgur.com/N5eKobU.png)
(This post was last modified: 01-22-2018, 08:25 PM by Locked.)
Locked.



![[+]](https://sinister.li/images/modern/collapse_collapsed.png)