Alias to detect possible subdomains subject to takeover.

cloudsub.alias

# This list of subdomains is from haccer/scanio.sh
# Source: https://gist.github.com/haccer/3698ff6927fc00c8fe533fc977f850f8
export SUBOVER_SEARCH='.cloudfront.net|.s3-website|.s3.amazonaws.com|w.amazonaws.com|1.amazonaws.com|2.amazonaws.com|s3-external|s3-accelerate.amazonaws.com|.herokuapp.com|.herokudns.com|.wordpress.com|.pantheonsite.io|domains.tumblr.com|.zendesk.com|.github.io|.global.fastly.net|.helpjuice.com|.helpscoutdocs.com|.ghost.io|cargocollective.com|redirect.feedpress.me|.myshopify.com|.statuspage.io|.uservoice.com|.surge.sh|.bitbucket.io|custom.intercom.help|proxy.webflow.com|landing.subscribepage.com|endpoint.mykajabi.com|.teamwork.com|.thinkific.com|clientaccess.tave.com|wishpond.com|.aftership.com|ideas.aha.io|domains.tictail.com|cname.mendix.net|.bcvp0rtal.com|.brightcovegallery.com|.gallery.video|.bigcartel.com|.activehosted.com|.createsend.com|.acquia-test.co|.proposify.biz|simplebooklet.com|.gr8.com|.vendecommerce.com|.azurewebsites.net|.cloudapp.net|.trafficmanager.net|.blob.core.windows.net'

# Function to read input from a file containing a list of subdomains, like the output from amass.
# Usage: $ cloudsub filename.txt
cloudsub() {
    for domain in `cat $1`; do dig $domain 2>/dev/null | grep -iE -m 1 $SUBOVER_SEARCH | awk '{print $1 "\n=> " $5 "\n"}'; done
}