Add IP geolocation and subdomain enumeration plugins

- Added geo.py plugin for IP geolocation with ip-api.com and ipapi.co support
- Added subdomains.py plugin for subdomain enumeration using CertSpotter API
- Updated help.py with documentation for new plugins
- Updated README.md with documentation for new plugins
- Both plugins support domain/IP resolution and provide detailed information
This commit is contained in:
2026-04-28 23:58:17 -05:00
parent 634ae1c066
commit 2b92bd389e
4 changed files with 507 additions and 1 deletions
+53 -1
View File
@@ -240,7 +240,59 @@ Perform comprehensive WHOIS lookups for domains and IP addresses.
- Provides clear error messages for failed lookups
- Handles rate limiting and WHOIS server unavailability
## ExploitDB Plugin
### 🔍 Subdomain Enumeration
**🔍 !subdomains [domain]**
Enumerate subdomains using SSL certificate transparency logs with the CertSpotter API.
**Features:**
- Discovers subdomains through SSL certificate transparency logs
- Uses the free CertSpotter API for enumeration
- No rate limiting or API key required
- Identifies subdomains through certificate SAN (Subject Alternative Name) enumeration
- No configuration required
**Examples:**
```bash
!subdomains example.com
!subdomains google.com
!subdomains github.com
```
**Output includes:**
- List of discovered subdomains from certificate transparency logs
- Formatted list with up to 20 subdomains shown
- Total count of discovered subdomains
### 🌐 IP Geolocation
**📍 !geo [ip/domain]**
Perform IP geolocation lookups with detailed geographic information.
**Features:**
- Uses ip-api.com as primary geolocation service with ipapi.co fallback
- Automatic domain to IP resolution
- Comprehensive geographic information
- No API key required for basic usage
**Examples:**
```bash
!geo 8.8.8.8
!geo example.com
!geo google.com
```
**Information provided:**
- Country and country code
- Region/State
- City
- Postal code
- Latitude/Longitude coordinates
- Timezone
- ISP/Organization
- Autonomous System Number (ASN)
### ExploitDB Plugin
A security plugin that searches Exploit-DB for vulnerabilities and exploits directly from Matrix.