SubCortex

SubCortex is a fast and effective tool designed for discovering valid subdomains for websites. It performs passive subdomain enumeration by collecting data from various sources.

Features

• Fast and Powerful: Quickly gathers subdomain data from various APIs.
• Advanced Retry Mechanism: Automatically retries commands in case of any errors.
• Modular Architecture: Easily extensible with support for different data sources.
• Comprehensive Support: Customizable through various command-line flags.

Screenshots

Videos

SubCortex.mp4

Usage

You can view the usage instructions with the following command:

  python3.12 subcortex.py -h

Examples

To collect subdomains:

  python3.12 subcortex.py -d example.com

Installation

SubCortex can be easily installed along with its required libraries as follows:

  pip3.12 install -r requirements.txt

Running

You can run SubCortex with the following command:

  python3.12 subcortex.py -d example.com

Important Note

Before running the Python file or if you encounter the "Your VirusTotal API key is missing." error, please edit the subcortex.py file by following these steps:

1. Open the subcortex.py file.
2. Locate the following line:

   VT_API_KEY = 'your_virustotal_api_key_here' 

3. Replace 'your_virustotal_api_key_here' with your actual VirusTotal API KEY
4. Save the file and try running the program again.

About the Project

SubCortex collects its resources through APIs. Key sources used for gathering subdomains include:

• CRTsh: crt.sh searches Certificate Transparency logs to find subdomains.

• SecurityTrails: SecurityTrails provides subdomain information through its comprehensive domain and DNS records database.

• VirusTotal: VirusTotal discovers subdomains by aggregating data from various domain records and sources.

• Wayback Machine: Wayback Machine identifies subdomains by crawling and archiving historical snapshots of web pages and their subdomains.

• etc..

SubCortex gathers its resources from subdomain tools, in addition to APIs. Key sources necessary for collecting subdomains include:

• TraceNinja: TraceNinja is a subdomain enumeration tool. (required)

• Subfinder: Discovers subdomains from passive sources. (required)

• Assetfinder: Finds subdomains for a specified domain. (required)

🔗 Links

License

This project is licensed under the MIT License.

Feel free to modify or add any information as needed! If there's anything more you'd like to include, just let me know!