Hello, everyone, and welcome to this video.
So in this video, we are going to use one of the tool which is written in gold and is used for identification
of subdomain teakwood vulnerabilities.
Now, as this tool is written in gold, it is faster.
And because of its concurrency, it makes our process much more fast to identify multiple subdomains
that are vulnerable to subdomain or what vulnerabilities.
So let's quickly jump into and see how can you do the installation of the tool and how you can identify
targets to be vulnerable to subdomain teakwood when liabilities.
For that, you just need to come to this GitHub repository, which is a subject.
And you can see over here the installation commands are being given.
Now, for this, you need to have go install into your computer as a prerequisite.
So, again, if you do not have go installed, please install go Lanco.
So after you have installed it, you can simply type the command, which is go get GitHub dot com slash
hacker slash subject as given over here to install the latest version of subject.
Perfect.
So I have done the installation of Sobchak into my computer as I have go preinstalled.
So now let's just type subject to see if it is running or not.
And you can see you will be able to see Helfman and a usage menu which confirms that it has successfully
installed.
All right.
So now we want to give a list of subdomains to subject for identification of subdomain teakwood one.
So now we are going to supply a list of subdomains using the fine domain tool.
So the command is fine domain hyphen D, which stands for the target.
And we are going to give the target, which is S.R. Secure Dot, X, Y, Z, and we are going to add
a flag which is hyphen, hyphen quite.
Remember guys, this flag is used when we do not want to see the verbose message or we do not want to
see the banner of a fine domain tool.
Now whatever will be the output of the fine domain tool, we are going to take that output into a file.
We are going to use a command, which is B, and I'm going to open the output into a file with this
site.
Start the 60.
All right, as you can see, we have successfully enumerated all the subdomains for the target into
a file called Site Start.
Let's count how many subdomains are there and in total of 107 subdomains are there, which we have identified.
Perfect.
So now we have the list of subdomains to be checked for subdomain, take over one of the abilities.
Let's quickly jump on to how to use a subject and its command, as you can see.
First, you have to right subject, then followed by Hyphen DeBlois, which stands for the WORDLIST
which contains the subdomains and the file is Saitoti.
We are going to give that number of threat to be 100 to increase the speed so that we get faster results
and then our process gets completed quickly.
We are going to give a timeout of 30 seconds.
So this timeout is basically when subject is not able to connect to any of the subdomain, it will automatically
give up onto that subdomain after 30 seconds.
And we are going to see if the output into a file called this result dot text, which is denoted by
a flag which is hyphen or and at the end we are given hyphen SSL hyphen.
SSL means that also test the website with SSL as well.
Now running this command directly on the terminal will start the subdomain decoder scan onto the list
of targets into the site started and it was really very quick to identify and you can see it has completed
the scan as well for 107 domains in just four to five seconds and has identified that this subdomain
is vulnerable, which is Red Mekki 20 dot as articulate X, Y, Z.
And we have already seen that this subdomain is vulnerable to Shopify take because we have pointed it
to Shopify, but we have not taken over the account.
So I hope you guys understood how you can use subject to my skill or identify subdomains for any target
program.
Thank you.