Ross ROSS = Recommend OSS · open-source software intelligence for agents

nsonaniya2010/SubDomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github. observed · 2026-08-28

github.com/nsonaniya2010/SubDomainizer · Python · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

66/100

  • Activity 97
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2844
  • days_rel: n/a
  • days_push: 22
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1886 stars · 235 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SubDomainizer is a Python CLI tool that discovers hidden subdomains and secrets in webpages, external JavaScript files, GitHub, and local folders. It also detects exposed cloud storage resources like S3 buckets and CloudFront distributions that may be vulnerable to takeover.

Use cases

  • find subdomains hidden in external javascript files
  • discover secrets and api keys in web pages and js files
  • enumerate subdomains via certificate transparency logs
  • find open s3 buckets and cloudfront urls for takeover
  • bug bounty reconnaissance on a target domain
  • scan a local folder of files for leaked secrets

When to choose

  • you need subdomain and secret discovery from JS files in one tool
  • you want passive enumeration via crt.sh and Wayback Machine without extra setup
  • you're doing bug bounty or attack-surface reconnaissance
  • you need JSON output to pipe into other security tooling

When to avoid

  • you need a full active subdomain brute-forcer with wordlists
  • you require high-accuracy secret detection with no false positives (feature is beta)
  • you need a GUI or continuous monitoring service
  • you need scanning beyond web/JS/GitHub sources

Facets

cli-tool · maturity active

security web-scraping osint vulnerability-scanning parser security penetration-testing osint developer-tools python cli windows cross-platform subdomain-enumeration secret-finding bug-bounty recon javascript-analysis s3-buckets cloud-storage shannon-entropy certificate-transparency command-line linux macos

1 source

Member repositories

RepositoryRoleHealth v2
nsonaniya2010/SubDomainizermain66

For agents

markdown · JSON · MCP: product_card(name="nsonaniya2010/SubDomainizer")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem