delator

DELATOR (lat. informer) is a tool to perform subdomain enumeration and initial reconnaissance through the abusing of certificate transparency logs. It expands on the original work done by Sheila A. Berta with her CTFR tool and leverages the speed and power of Go.

Using DELATOR is as simple as running:

./delator -d facebook.com

DELATOR can also be instructed to resolve any subdomains found, giving a first indication of any live sites:

./delator -d facebook.com -a

Installation

There are two ways to install dnsmorph on your system:

1. Downloading the pre-compiled binaries for your platform from the latest release page and extracting in a directory of your choosing.

2. Downloading and compiling the source code yourself by running the following commands:

   • go get github.com/netevert/delator
   • cd /$GOPATH/src/github.com/netevert/delator
   • go build

License

Distributed under the terms of the MIT license, DELATOR is free and open source software written and maintained with ❤ by NetEvert.

Versioning

This project adheres to Semantic Versioning.

Like it?

DELATOR is under active development so make sure you check back frequently for new releases. However if you like the tool please consider contributing.

A particular issue with DELATOR and CTFR is that both tools rely entirely on Comodo's Certificate Search API. If the API is discontinued the tools will cease to work. A new version of DELATOR is currently in the works that will allow for the download of subdomains directly from certificate transparency logs and storage in a local database. This would allow for later scanning for subdomains on demand and give DELATOR the ability to retain it's usefulness should Comodo's API disappear.