34 lines
691 B
Bash
Executable File
34 lines
691 B
Bash
Executable File
if [ -z "$1" ]; then
|
|
echo "Usage: $0 domain.com"
|
|
exit 1
|
|
fi
|
|
|
|
DOMAIN="$1"
|
|
OUTPUT_FILE="ips.txt"
|
|
SUBS_FILE="subs.txt"
|
|
|
|
echo "[*] Enumerating subdomains for $DOMAIN..."
|
|
subfinder -silent -d "$DOMAIN" -o "$SUBS_FILE"
|
|
|
|
if [ ! -s "$SUBS_FILE" ]; then
|
|
echo "[!] No subdomains found or subfinder failed."
|
|
exit 1
|
|
fi
|
|
|
|
echo "[*] Resolving IPs..."
|
|
> "$OUTPUT_FILE"
|
|
|
|
while read -r sub; do
|
|
ips=$(dig +short "$sub" | grep -E '^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$')
|
|
if [ -n "$ips" ]; then
|
|
for ip in $ips; do
|
|
echo "[+] $sub resolved to $ip"
|
|
echo "$ip" >> "$OUTPUT_FILE"
|
|
done
|
|
else
|
|
echo "[-] $sub did not resolve"
|
|
fi
|
|
done < "$SUBS_FILE"
|
|
|
|
echo "[*] IPs saved to $OUTPUT_FILE"
|