用 PassiveTotal 的 API 获取子域名

get_subdomains_from_passivetotal.py

import json
import sys
import requests

requests.packages.urllib3.disable_warnings()

domain = sys.argv[1]

url = 'https://api.passivetotal.org/v2/dns/search/keyword'
auth = ("your_email", "your_api_key")
params = {'query': domain}
response = requests.get(url, auth=auth, params=params, verify=False)
loaded_content = json.loads(response.content)

for x in loaded_content['results']:
    y = x['focusPoint']
    if y.endswith(domain) and y != domain and '*' not in y:
        print y