A Python tool that queries Google's SSL transparency report to discover subdomains and identify expired certificates.
GoogleSSLdomainFinder (GSDF) is a Python-based security tool that queries Google's SSL certificate transparency report to discover subdomains associated with a target domain. It helps identify potential attack surfaces by revealing subdomains that have issued SSL certificates, including those with expired certificates that may indicate neglected services. The tool outputs results in a terminal table and saves them to a file for further analysis.
Security researchers, penetration testers, and network administrators who need to perform subdomain enumeration as part of reconnaissance or vulnerability assessment workflows.
GSDF provides a lightweight, scriptable alternative to commercial subdomain discovery tools by leveraging free, public certificate transparency data from Google. Its ability to detect expired certificates adds unique value for identifying potentially vulnerable or forgotten subdomains.
A domain searcher named GoogleSSLdomainFinder - 基于谷歌SSL透明证书的子域名查询工具
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Leverages Google's SSL transparency report, a free and extensive source, to discover subdomains without aggressive scanning, as stated in the project philosophy.
Identifies subdomains with expired SSL certificates, a unique feature added in v2.0 that helps pinpoint potential vulnerabilities or neglected services.
Provides a Python library (GSDFA) for programmatic integration, allowing easy use in security automation workflows, as shown in the API usage example.
Includes options for proxies like Shadowsocks, making it usable in restricted networks, though setup requires manual code changes per the README.
Specifically requires Python 2.x, which is no longer maintained, leading to compatibility issues and security risks in modern environments.
Relies solely on Google's certificate transparency logs, missing subdomains without SSL certificates or from other sources, reducing comprehensiveness.
Enabling proxy support necessitates uncommenting and modifying code in the script, adding complexity and potential errors for users.
Last significant update was in 2018, indicating potential abandonment and lack of support for evolving Python libraries or security standards.