Back home
中文
H7 / SECURITY RESEARCH NOTES

BurpDomain

On this page9 sections

Description

  • BurpDomain is an open-source plugin on Github for Burp Suite whose purpose is to collect subdomains.

Main Usage

0x01 First, load the plugin into Burp Suite

0x02 Then install and start the Mysql service locally, create a database in Mysql, and configure the Mysql connection

0x03 Create a new project

  • Click the Project Setting button, enter the project name, click add, and select it to create a new project.
  • Because a database is used for storage, historical project records are stored. At runtime, project information is retrieved from the database, and you can also select a project directly to continue it.

0x04 Add root domains

  • Click the RootDomain Setting button and add all the root domains that need to be crawled.

0x05 Domain collection

  • If you need to capture historical traffic, just click the grep domains button.
  • After configuration is complete, no further operations are required. The following image shows the result:

Tool Features

  • The field-sorting function can quickly filter out internal-network IPs, IPs in similar network segments, and similar domains. Based on this information, you can customize domain dictionaries, brute-force HOSTs, and further expand the scope of information collection.

Homepage/Repo/Manual