GitHub - Merklemap/merklemap-cli: Discover and enumerate all subdomains associated with a website, including those not publicly advertised. Use this tool to conduct thorough security assessments, validate your organization's digital footprint, or enhance your reconnaissance capabilities for penetration testing and bug bounty hunting.

1 min read Original article ↗

A command-line interface (CLI) client for the merklemap API. This tool allows you to search / enumerate subdomains matching a given query and tail live subdomain discoveries from the Merklemap ingestion pipeline.

Features

  • Search for subdomains matching a specific query
  • Tail live subdomain discoveries in real-time

Installation

To install the MerkleMap CLI, you need to have Rust and Cargo installed on your system. If you don't have them installed, you can get them from rustup.rs.

Once you have Rust and Cargo installed, you can build and install the CLI by running:

cargo install merklemap-cli

This will compile the project and install the binary in your Cargo bin directory.

Usage

The MerkleMap CLI provides two main commands:

Search

To search for subdomains matching a query:

merklemap-cli search <QUERY>

Replace <QUERY> with your search term.

Tail

To tail live subdomain discoveries:

Output Format

Search Output

The search command outputs results in the following format:

domain=<domain> subject_common_name=<common_name> not_before=<timestamp> human_readable_not_before=<formatted_date>

Tail Output

The tail command outputs results in the following format:

hostname=<hostname> timestamp=<ISO8601_timestamp> human_readable_not_before=<formatted_date>

Development

To build the project:

Contributing

Contributions are welcome! Please feel free to submit a Pull Request.