- Create an .env file
TMP_DIR=./tmp
H1_TOKEN=
IT_TOKEN=
BC_TOKEN=
BC_EMAIL=
OUTPUT_FILE=resolvable_targets.txt
(fill in your tokens)
-
Check
search_domains.sh, uncomment Bugcrowd lines if you want -
Start a venv and install requirements
-
Run ./search_domains.sh
Filtering wildcards is a challenge, and this script might yield results that are out of scope.