How solidshadw/subsprayer works
SubSprayer is a shell-based subdomain enumeration workflow for authorized targets. A user supplies one or more domains, and the CLI coordinates independent discovery sources, optional DNS brute forcing and GitHub Code Search, then checks discovered hosts with httpx and writes dated result files. The README documents these capabilities and integrations; source excerpts were unavailable, so edges reflect documented behavior rather than inspected call sites.
Main entry points: subsprayer.sh SubSprayer CLI
Components 14
Inputs and CLI
- SubSprayer CLI
subsprayer.sh - Domain Inputs
subsprayer.sh
Discovery Sources
- Subfinder
- Findomain
- OWASP Amass
- crt.sh API
- Cert Spotter API
Optional Enrichment
- Gobuster
- GitHub Code Search
Validation and Results
- httpx
- Dated Results
subsprayer.sh - Combined Subdomains
subsprayer.sh - Live Host Results
subsprayer.sh
Other components
- Authorized User
Connections 22
- Authorized User → SubSprayer CLI: provides targets
- SubSprayer CLI → Domain Inputs: validates
- SubSprayer CLI → Subfinder: runs
- SubSprayer CLI → Findomain: runs
- SubSprayer CLI → OWASP Amass: runs
- SubSprayer CLI → crt.sh API: queries
- SubSprayer CLI → Cert Spotter API: falls back
- SubSprayer CLI → Gobuster: runs with wordlist
- SubSprayer CLI → GitHub Code Search: searches with token
- SubSprayer CLI → httpx: checks live hosts
- SubSprayer CLI → Combined Subdomains: writes
- SubSprayer CLI → Live Host Results: writes
- SubSprayer CLI → Dated Results: organizes by date
- Subfinder → Combined Subdomains: contributes results
- Findomain → Combined Subdomains: contributes results
- OWASP Amass → Combined Subdomains: contributes results
- crt.sh API → Combined Subdomains: contributes results
- Cert Spotter API → Combined Subdomains: contributes results
- Gobuster → Combined Subdomains: contributes results
- GitHub Code Search → Combined Subdomains: contributes results
- Combined Subdomains → httpx: supplies hosts
- httpx → Live Host Results: returns live hosts