Skip to content

Instantly share code, notes, and snippets.

@atucom
Created June 6, 2019 18:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save atucom/083fbcdf181ebaf1bb68edcf192bb995 to your computer and use it in GitHub Desktop.
Save atucom/083fbcdf181ebaf1bb68edcf192bb995 to your computer and use it in GitHub Desktop.
Brute ngrok subdomains
#!/usr/bin/env python3
#brute ngrok's subdomain pattern
import requests
import itertools
for sub in itertools.product("0123456789abcdef", repeat=8):
host = "".join(sub) + ".ngrok.io"
print(host)
reply = requests.get("http://18.188.14.65", headers={"Host": host})
if "Tunnel " + host + " not found" not in reply.text:
print("GOTCHYA: {}".format(host))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment