Sudomy: Information Gathering Tools for Subdomain Enumeration and Analysis

Abstract

In general, system security has become a crucial element in the digital aspect. Technically, evaluating the system there are aspects, one of which is by conducting a security assessment. Specifically, each system that will be evaluated is the essence of vulnerability search. The information security assessment is a form of awareness regarding cyberattacks that always increases from year to year. The assessment process can be carried out by an internal team and/or external auditor. The stages of evaluation by internal teams are certainly different from those of external parties. External auditors in conducting assessments need to learn or get as much information as possible related to the target, which in this case is in the form of a subdomain. Therefore, we need applications that support effective and efficient Information Gathering to assist in analysis and reporting. There are still many Information Gathering applications that do not include reporting and data validation systems. In this study, it is proposed to develop applications to support the Information Gathering stage which makes it easier for Cyber Security researchers/analysts.

Pengumpulan Informasi pada Situs Web Dengan Menyusun Kerangka Kerja Keamanan Siber NIST

“…Beberapa fitur utama Sudomy mencakup pemeriksaan Host pada subdomain aktif, pengumpulan informasi HTTP status code response, konversi dari daftar subdomain ke Resolver IP, pemindaian port dari Resolver IP, pengecekan potensi serangan Subdomain Take-Over, pengambilan tangkapan layar melalui daftar domain, serangan DNS Bruteforce Subdomain, dan penyajian laporan interaktif. Walaupun Sudomy memiliki keunggulan dalam fitur-fiturnya, kelemahannya terletak pada penggunaan antarmuka berbasis teks atau CLI (Command Line Interface), yang belum mendukung antarmuka grafis untuk memudahkan pengguna [11].…”

Lightweight Cryptographic Techniques and Cybersecurity Approaches

“…Another interesting enumeration tool which is considered as opportunistic python script, is Responder. This tool waits for broadcast requests and then response to them for that it is called opportunistic tool as it captures traffic intended for other system aiming to trick users and drag them to log into a fake server then, Responder can be able to capture the user's credentials to be used later in other attacks [37,38].…”

Pengembangan Aplikasi Information Gathering Menggunakan Metode Hybrid Scan Berbasis Graphical User Interface

“…Namun, alat bantu tersebut kurang memenuhi kebutuhan analis/penguji keamanan siber secara komprehensif (Hariyadi, Wijayanto dan Fazlurrahman, 2020). Oleh sebab itu dikembangkan aplikasi Sudomy sebagai aplikasi yang mendukung tahapan Information Gathering lebih komprehensif dengan metode hybrid scan (Ramadhan, Aresta dan Hariyadi, 2020).…”

“…Pemindaian pasif yaitu pemindaian yang menggunakan pihak ketiga dalam melakukan proses pemindaian target. Sebaliknya dengan pemindaian aktif yaitu pemindaian yang menggabungkan sumber daya atau aplikasi yang telah terinstall sebelumnya pada komputer (Ramadhan, Aresta dan Hariyadi, 2020). Adapun detil perbedaaan antara Sudomy dan penelitian ini dapat dilihat pada Tabel 1.…”