apapedulimu bisa juga pake ini gan https://pentest-tools.com/information-gathering/find-subdomains-of-domain
hanmaru pakai dnscan,, ada di github itu pakai wordlist (udah disediain) trus kalo kurang ampuh biasanya aku cek IP nya 1 1 wkwk :v ini scriptnya,, sorry q gaiso ngoding wkwk misal ip nya: 114.13.41.41 >> brrti IP awalnya kan 114.13.41.1 usage : php file.php 114.13.41.1 >> ntar dia ngecek port 80 dari 1 sampe 255 , udah gt doank wkwk <?php error_reporting(0); echo "only show available site !! \n"; function availableUrl($host, $port=80, $timeout=10) { $fp = fSockOpen($host, $port, $errno, $errstr, $timeout); return $fp!=false; } $total =0; if($argv[1] == ''){ echo "usage: php namafile.php IP_awal \n"; echo "ex: php file.php 144.45.56.1 \n"; } else{ $split = explode(".",$argv[1]); // foreach ($split as $key => $value) { // echo "split[".$key."] = ".$value."\n"; // } $a = 1; for ($akhir=$split[3]; $akhir <= 255; $akhir++) { if ($a == 1) { $akhir=$split[3]; } $ip = $split[0].".".$split[1].".".$split[2].".".$akhir; $a += 1; //echo $ip; if (availableUrl($ip) == true) { //echo $ip . " is UP ? CONGRATZ !!!"; // echo $ip; // echo "\t"; $hostname = gethostbyaddr($ip); echo $hostname; echo "\n"; $total += 1; } // else{ // echo $ip . " is DOWN ?"; // echo "\n"; // } } } echo "result: " . $total . "\n"; ?>
