POC Code for API Subdomains Discovery With Alterx

import subprocess

import sys

def run_subdomain_search(subdomain_list_file, api_keywords_file):

    # Read the subdomain list from the file

    with open(subdomain_list_file, ‘r’) as subdomain_file:

        subdomains = subdomain_file.read().splitlines()

    # Build the command with double curly braces for placeholders

    command = f”cat {subdomain_list_file} | alterx -p ‘{{{{sub}}}}{{{{word}}}}.{{{{suffix}}}}’ -pp ‘word={api_keywords_file}’ -silent | dnsx -silent -o api-subdomains.txt”

    # Print the command before running it

    print(“Running the following command:”)

    print(command)

    # Execute the command and capture its output

    try:

        output = subprocess.check_output(command, shell=True, universal_newlines=True)

        print(“\nCommand output:”)

        print(output)

        print(“Subdomain search completed successfully.”)

    except subprocess.CalledProcessError as e:

        print(“\nAn error occurred while running the subdomain search command.”)

        print(e)

if __name__ == ‘__main__’:

    if len(sys.argv) != 3:

        print(“Usage: python subdomain_search.py <subdomain_list_file> <api_keywords_file>”)

    else:

        subdomain_list_file = sys.argv[1]

        api_keywords_file = sys.argv[2]

        run_subdomain_search(subdomain_list_file, api_keywords_file)