This is a personal program that I wrote to automate continuous recon for bug bounty. It cycles through subfinder, amass and nuclei to find subdomains and takeovers.

positional arguments:
  dir                   The path to scope files from HackerOne

options:
  -h, --help            show this help message and exit
  -t, --max-threads MAX_THREADS
                        Max thread count
  -d, --debug

The max-threads flag determines how many targets to scan at once. For example, setting -t 2 will loop through all of the targets indefinitely two at a time.

Add the CSV scope files of programs from HackerOne to the scopes dir.

Add config files to the config dir.

Good luck :)

./sub_search.py scopes -t 5 -d

An orgs dir is created for saving results.

• Implement a cleaner solution for reading config files.
• Utilize Luigi to create a Pipeline so failures are handled more reliably.
• Cleanup the BasicCommand class and include more tools.
• Add SMS Notifications.
• Use a package manager.