FindFrontableDomains

Enumerate and search for potential frontable domains

Forked and updated with some additional features over the original:

• Ported to Python 3
• Recursive sub-domain enumeration and subsequent checking
• Colourising of Azure frontable domains that support TLS 1.0
• Added checks for Google's AppSpot

Based on information found here: https://www.bamsoftware.com/papers/fronting/

Install & Setup

git clone https://github.com/PwnDexter/FindFrontableDomains.git

Run setup.sh

chmod +x setup.sh
./setup.sh

Usage

Print help

python3 FindFrontableDomains.py -h

Example Command:

python3 FindFrontableDomains.py --alexa 10000 --threads 20

Example Command:

python3 FindFrontableDomains.py --domain example.com --threads 20

Example Command:

python3 FindFrontableDomains.py --check ajax.microsoft.com

Roadmap

• - Add more frontable Products if the appear
• - Add more sub domain enumeration techniques
• - Add Cert Transparancy checks to get more domains