SUBLIST3R USING KALI LINUX
Sublist3r is a Python-based tool designed to enumerate subdomains of websites using various search
engines and other services. It helps penetration testers and security researchers collect subdomains and
perform reconnaissance on target domains. Sublist3r integrates with popular search engines like Google,
Yahoo, Bing, and Baidu, as well as various other sources like Netcraft, Virustotal, ThreatCrowd,
DNSdumpster, and ReverseDNS.
Kali Linux, a Debian-derived Linux distribution, is specifically crafted for digital forensics and
penetration testing. It comes pre-installed with numerous security tools, including Sublist3r, which can be
easily used for subdomain enumeration tasks.
STEPS FOR SUBLIST3R ON KALI LINUX
Step 1: Clone the Sublist3r repository
First, clone the Sublist3r repository from GitHub.
git clone https://github.com/aboul3la/Sublist3r.git
Step 2: Navigate to the Sublist3r directory
cd Sublist3r
Step 3: Install the required dependencies
Install the required dependencies using pip3.
pip3 install -r requirements.txt
Step 4: Run Sublist3r for multiple domains
Run Sublist3r with verbose output for each domain to find their subdomains.
The command sublist3r -d <website> -v will run Sublist3r in verbose mode, which provides
more detailed output about the enumeration process. The -v flag enables verbose logging, showing more
information about the progress and results as Sublist3r searches for subdomains.
python3 sublist3r.py -d amazon.com -v
For flipkart.com
python3 sublist3r.py -d flipkart.com -v
For microsoft.com
python3 sublist3r.py -d microsoft.com -v
For iqiyi.com
python3 sublist3r.py -d iqiyi.com -v
For netflix.com
python3 sublist3r.py -d netflix.com -v
For facebook.com
python3 sublist3r.py -d facebook.com -v
Conclusion
By following the steps outlined above, you can successfully use Sublist3r on Kali Linux to find
subdomains for multiple websites. The process involves cloning the Sublist3r repository from GitHub,
installing the necessary dependencies, and then running the tool for each domain with verbose output.
Using the provided commands, you can efficiently enumerate subdomains for domains such as
amazon.com, flipkart.com, microsoft.com, iqiyi.com, netflix.com, and facebook.com. This
comprehensive subdomain discovery process is essential for security assessments and helps uncover
potentially vulnerable entry points that might otherwise be overlooked.
By integrating Sublist3r into your toolkit, you enhance your capability to perform thorough
reconnaissance and improve the security posture of your targets.
