Collect Subdomains From Three different source

passive_subdomain.py

#!/usr/bin/env python3
import requests
import json
import sys
import os
execute=os.system
__Author__="Joy Ghosh [System00 Security]"
def passive(domain):
        bufferoverrun=requests.get(f'https://dns.bufferover.run/dns?q={domain}').json()
        buff_dump=json.dumps(bufferoverrun)
        buff_load=json.loads(buff_dump)
        for subs in buff_load['FDNS_A']:
            ip,urls=subs.split(',')
            print(urls)
        for subs in buff_load['RDNS']:
            ip,urls=subs.split(',')
            print(urls)
        hackertarget=requests.get(f'https://api.hackertarget.com/hostsearch/?q={domain}').text
        hostnames = [result.split(",")[0]for result in hackertarget.split("\n")]
        for hostname in hostnames:
            print(hostname)
        threatcrowd=requests.get(f'https://www.threatcrowd.org/searchApi/v2/domain/report/?domain={domain}').json()
        threatcrowd_dumps=json.dumps(threatcrowd)
        threatcrowd_loads=json.loads(threatcrowd_dumps)
        for subs in threatcrowd_loads['subdomains']:
            print(subs)
            
passive('target.com')