{"id":5392,"date":"2020-04-30T22:46:33","date_gmt":"2020-04-30T14:46:33","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=5392"},"modified":"2020-04-30T22:50:35","modified_gmt":"2020-04-30T14:50:35","slug":"second-order-subdomain-takeover-scanner-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2020\/04\/second-order-subdomain-takeover-scanner-tool\/","title":{"rendered":"Second Order &#8211; Subdomain Takeover Scanner Tool"},"content":{"rendered":"<p>Second Order Subdomain Takeover Scanner Tool scans web applications for second-order subdomain takeover by crawling the application and collecting URLs (and other data) that match specific rules or respond in a specific way.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/04\/Second-Order-Subdomain-Takeover-Scanner-Tool-640x328.png\" alt=\"Second Order - Subdomain Takeover Scanner Tool\" width=\"640\" height=\"328\" class=\"aligncenter size-medium wp-image-5444\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/04\/Second-Order-Subdomain-Takeover-Scanner-Tool-640x328.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/04\/Second-Order-Subdomain-Takeover-Scanner-Tool.png 941w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h2>Using Second Order Subdomain Takeover Scanner Tool<\/h2>\n<p>Command line options:<\/p>\n<pre> -base string\r\n       Base link to start scraping from (default \"http:\/\/127.0.0.1\")\r\n -config string\r\n       Configuration file (default \"config.json\")\r\n -debug\r\n       Print visited links in real-time to stdout\r\n -output string\r\n       Directory to save results in (default \"output\")<\/pre>\n<p>Example:<\/p>\n<pre>go run second-order.go -base https:\/\/example.com -config config.json -output example.com -concurrency 10<\/pre>\n<h3>Config File for Second Order Subdomain Takeover Scanner Tool<\/h3>\n<p>Example configuration file included (config.json)<\/p>\n<ul>\n<li><strong>Headers:<\/strong> A map of headers that will be sent with every request.<\/li>\n<li><strong>Depth:<\/strong> Crawling depth.<\/li>\n<li><strong>LogCrawledURLs:<\/strong> If this is set to true, Second Order will log the URL of every crawled page.<\/li>\n<li><strong>LogQueries:<\/strong> A map of tag-attribute queries that will be searched for in crawled pages. For example, &#8220;a&#8221;: &#8220;href&#8221; means log every href attribute of every a tag.<\/li>\n<li><strong>LogURLRegex:<\/strong> A list of regular expressions that will be matched against the URLs that are extracted using the queries in LogQueries; if left empty, all URLs will be logged.<\/li>\n<li><strong>LogNon200Queries:<\/strong> A map of tag-attribute queries that will be searched for in crawled pages, and logged only if they don&#8217;t return a 200 status code.<\/li>\n<li><strong>ExcludedURLRegex:<\/strong> A list of regular expressions whose matching URLs will not be accessed by the tool.<\/li>\n<li><strong>ExcludedStatusCodes:<\/strong> A list of status codes; if any page responds with one of these, it will be excluded from the results of LogNon200Queries; if left empty, all non-200 pages&#8217; URLs will be logged.<\/li>\n<li><strong>LogInlineJS:<\/strong> If this is set to true, Second Order will log the contents of every script tag that doesn&#8217;t have a src attribute.<\/li>\n<\/ul>\n<p>You can download Second Order here:<\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/mhmdiaa\/second-order\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Second Order Subdomain Takeover Scanner Tool scans web applications for second-order subdomain takeover by crawling the application and collecting URLs (and other data) that match specific rules or respond in a specific way. Using Second Order Subdomain Takeover Scanner Tool Command line options: -base string Base link to start scraping from (default &#8220;http:\/\/127.0.0.1&#8221;) -config string [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":5444,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"Second Order - Subdomain Takeover Scanner Tool","_seopress_titles_desc":"Second Order Subdomain Takeover Scanner Tool scans web apps for second-order subdomain takeover by crawling the application and collecting URLs (and other data)","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[5],"tags":[1693],"featured_image_src":"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/04\/Second-Order-Subdomain-Takeover-Scanner-Tool-600x400.png","featured_image_src_square":"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/04\/Second-Order-Subdomain-Takeover-Scanner-Tool-600x482.png","author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5392"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=5392"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5392\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media\/5444"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=5392"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=5392"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=5392"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}