by bit4woo

bit4woo /domain_hunter

A Burp Suite Extender that try to find all sub-domain, similar-domain and related-domain of an organ...

494 Stars 107 Forks Last release: 26 days ago (v1.5) MIT License 57 Commits 15 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

Open Source LoveMIT Licence




A Burp Suite extender that try to find sub-domains,similar domains and related domains of an organization automatically, not only domain. Some times similar domain and related domains give you surprise^_^. that's why I care about it.



  1. download this burp extender from here.
  2. add it to burp suite. you will see a new tab named “Domain Hunter”, if no error encountered.
  3. visit your target website(or App) with burp proxy enabled, ensure burp recorded http or https traffic of your target.
  4. you can just switch to the "domain hunter" tab, input the domain that you want to search and click "Search" button.
  5. or you can run "Crawl" firstly to try to find more sub-domains and similar domains.




change log

2017-07-28: Add a function to crawl all known subdomains; fix some bug.

2018-07-06: Add the ability to get related domains by get SANs object of certification.

2018-08-03: Use thread to speed up get related-domains.

2018-09-18: Optimize some steps to reduce memory usage.

2018-09-19: Update getSANs() method to void get domains of CDN provider.

2018-09-20: Update logic of getting possible https URLs that may contain related-domains

2018-09-21: Update logic of "includeInScope" and "sendToSpider" to reduces UI action time

2018-09-29: Add Upload function to support upload result to your site or system

2018-10-30: Big Change: try to find sub-domains, similar domains , related domains of an organization(enterprise), not only a domain.

2018-11-01: Add "Add to domain hunter" menu in site map tree.

2019-07-06: Use multiple thread to improve search speed. Use regex to find more domain in every response.

xmind of domain collection




We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.