Discover endpoints using companies GitHub Repositories name

Requirements

HTTPX:

Thanks to ProjectDiscovery for such a great tool. You can download httpx from here.

How it works:

1. First it will get all repositories from ORG GitHub page.
2. You can use a silgle domain or a list of subdomains.
3. Then this tool will search for endpoints like:

	* reponame-sub.domain.com
	* reponame.domain.com
	* reponame.sub.domain.com
	* reponame-domain.com
	* reponamedomain.com
	* reponame.tld (Will add this in next release)
	* org.github.io/reponame

Usage

git clone https://github.com/pocdork/gitdomain.git
cd gitdomain
bash gitdomain.sh [GutHub-ORG name] -[t/d] [domain.txt/company.com]

Save your GitHub access token in .token file (Only store one token without any space).

To use this with a single domain:

bash gitdomain.sh [GutHub-ORG name] -d company.com

To use this with a list of subdomains:

bash gitdomain.sh [GutHub-ORG name] -t domain.txt

Demo:

https://twitter.com/pocdork/status/1386059518119870465

Follow Me