BruteDum : Brute Force Attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time.

Install

git clone https://github.com/naufalardhani/domhttpx.git
cd domhttpx
pip3 install -r requirements.txt
python3 domhttpx.py –help

Usage

Flags

This will display help for the tool. Here are all the switches it supports.

FlagDescriptionExample
-ip, –only-ipShow output as IP onlydomhttpx –only-ip
-od, –only-domainShow output as domain onlydomhttpx –only-domain
-rp, –real-pathExtract real pathdomhttpx -k [keyword] -a [amount] –real-path
-p, –pathCustom path urldomhttpx -k [keyword] -a [amount] –path [custom_path]
-sc, –status-codeExtract status codedomhttpx -k [keyword] -a [amount] –status-code
-t, –titleExtract title pagedomhttpx -k [keyword] -a [amount] –title
-ws, –web-serverExtract web serverdomhttpx -k [keyword] -a [amount] –server
-cr, –check-resultCheck list resultdomhttpx –check-result
-sr, –show-resultShow result contentdomhttpx –show-result result.txt
-rr, –remove-resultRemove result filedomhttpx –remove-result result.txt
-o, –outputFile to write outputdomhttpx -k [keyword] -a [amount] -o output.txt
-s, –silentShow only subdomains in outputdomhttpx -k [keyword] -a [amount] –silent
-v, –versionShow current program versiondomhttpx –version

Basic Usage

>domhttpx.py –keyword [keyword] –amount [amount]

One keyword

> domhttpx.py –keyword pentesting –amount 5

Multiple keyword

>domhttpx.py –keyword “pentesting basic” –amount 5

Extract Title Page

>domhttpx.py –keyword “pentesting basic” –amount 5 –title

Extract Title Page from Real Path

>domhttpx.py –keyword “pentesting basic” –amount 5 –title –real-path

Extract Web Server

>domhttpx.py –keyword “pentesting basic” –amount 5 –web-server

Running Example

Running domHttpx with default command

This will run an automatic search tool with the specified keyword and number

➤ domhttpx.py –keyword indonesia –amount 20
_ _ _ _ _
| | _ | || | || |_ _ _
/
` / _ \ ‘ | _ | | | ‘ \ \ /
__,__/||||||_|__| ._/_\
|_| v1.0.0
naufalardhani.com
https://www.suara.com
https://www.suara.com
https://www.suara.com
https://en.wikipedia.org
https://en.wikipedia.org
https://en.wikipedia.org
https://en.wikipedia.org
https://en.wikipedia.org
https://id.wikipedia.org
https://id.wikipedia.org
https://id.wikipedia.org
https://id.wikipedia.org
https://id.wikipedia.org
https://www.indonesia.travel
https://www.britannica.com
https://indonesia.go.id
https://www.garuda-indonesia.com
https://wikitravel.org
https://www.aljazeera.com
https://www.worldbank.org
[INFO] Searching domain for indonesia keyword
[INFO] Found 20 domain

Show output as IP

➤ domhttpx.py –keyword indonesia –amount 9 –only-ip
_ _ _ _ _
| | _ | || | || |_ _ _
/
` / _ \ ‘ | _ | | | ‘ \ \ /
__,__/||||||_|__| ._/_\
|_| v1.0.0
naufalardhani.com
54.192.146.34
103.102.166.224
104.93.220.176
104.18.19.221
202.89.117.193
104.18.11.196
172.67.161.37
104.93.115.155
199.232.44.143
[INFO] Searching IP for indonesia keyword
[INFO] Found 9 IP

Extracts the real path

➤ domhttpx.py –keyword indonesia –amount 9 –real-path
_ _ _ _ _
| | _ | || | || |_ _ _
/
` / _ \ ‘ | _ | | | ‘ \ \ /
__,__/||||||_|__| ._/_\
|_| v1.0.0
naufalardhani.com
https://www.suara.com/entertainment/2021/07/01/211333/6-aktor-indonesia-main-di-film-hollywood-tak-cuma-andalkan-tampang
https://en.wikipedia.org/wiki/Indonesia
https://www.indonesia.travel/id/en/home
https://www.britannica.com/place/Indonesia
https://indonesia.go.id/
https://www.garuda-indonesia.com/
https://wikitravel.org/en/Indonesia
https://www.aljazeera.com/where/indonesia/
https://www.lonelyplanet.com/indonesia
[INFO] Searching domain for indonesia keyword
[INFO] Found 9 domain

Extracts status code

➤ domhttpx.py –keyword “Indonesia Basketball League” –amount 10 –status-code
_ _ _ _ _
| | _ | || | || |_ _ _
/
` / _ \ ‘ | _ | | | ‘ \ \ /
__,__/||||||_|__| ._/_\
|_| v1.0.0
naufalardhani.com
https://en.wikipedia.org [200]
https://iblindonesia.com [200]
https://iblindonesia.com [200]
https://iblindonesia.com [200]
https://iblindonesia.com [200]
https://iblindonesia.com [200]
https://twitter.com [200]
https://twitter.com [200]
https://en.wikipedia.org [200]
https://en.wikipedia.org [200]
[INFO] Searching domain for Indonesia Basketball League keyword
[INFO] Found 10 domain

Extracts title page

➤ domhttpx.py –keyword “Ananta Dandy” –amount 10 –real-path –title
_ _ _ _ _
| | _ | || | || |_ _ _
/
` / _ \ ‘ | _ | | | ‘ \ \ /
__,__/||||||_|__| ._/_\
|| v1.0.0 naufalardhani.com https://www.dbl.id/camp/1/campers/98/ananta-dandy [Campers – Ananta Dandy] https://www.dbl.id/u/profile/12379/ananta-dandy [Ananta Dandy Profile | DBL ID] https://www.instagram.com/anantadandy/?hl=en [Page Not Found • Instagram] https://play.fiba3x3.com/players/d3a6cc16-fd25-424d-a3a4-62515c5cd075 [Ananta Dandy] https://www.youtube.com/watch?v=DghZd7E3YL0 [Ananta Dandy – Rakan – Rafie – Saddam & Zee Bikin Komunitas #Basket Komplek | Isinya Jagoan Semua ! – YouTube] https://www.youtube.com/watch?v=J4oOSmfOlmA [Next in Line #12: Ananta Dandy Tentang Bermain melawan Filipin & Motivasi Untuk Juara DBL. – YouTube] https://www.youtube.com/watch?v=A4xu1aMWCy0 [ANANTA DANDY DAN MUHAMAD HAFIZH | DYNAMIC DUO DARI SMAN 71 JAKARTA – YouTube] https://archive.fiba.com/pages/eng/fa/player/p/pid/137281/sid/13264/tid/302/tid2///2017_SEABA_U16_Championship_for_Men/index.html [Ananta Dandy Putra Tarigan’s profile | 2017 SEABA U16 Championship for Men | ARCHIVE.FIBA.COM]
http://sman71.sch.id/2020/08/data-sementara-alumni-siswa-sman-71-tahun-2020-yang-diterima-di-ptn/ [Data Sementara Alumni Siswa SMAN 71 Tahun 2020 yang Diterima di PTN – SMAN 71]
https://www.mainbasket.com/r/6522/muhamad-hafizh-gua-ingin-jadi-pemain-indonesia-pertama-di-nba [Muhamad Hafizh: Gua Ingin Jadi Pemain Indonesia Pertama di NBA – mainbasket.com]
[INFO] Searching domain for Ananta Dandy keyword
[INFO] Found 10 domain