# DomainDouche | OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force

**URL:** <https://onehack.st/t/domaindouche-osint-tool-to-abuse-securitytrails-domain-suggestion-api-to-find-potentially-related-domains-by-keyword-and-brute-force/229253>\
**Category:** Tools & Scripts\
**Tags:** tools, browsers\
**Created:** [December 2, 2022, 10:47pm UTC](https://onehack.st/t/domaindouche-osint-tool-to-abuse-securitytrails-domain-suggestion-api-to-find-potentially-related-domains-by-keyword-and-brute-force/229253 "2022-12-02T22:47:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [December 2, 2022, 10:47pm UTC](https://onehack.st/t/domaindouche-osint-tool-to-abuse-securitytrails-domain-suggestion-api-to-find-potentially-related-domains-by-keyword-and-brute-force/229253/1 "2022-12-02T22:47:31Z")

</div>

[![](https://user-images.githubusercontent.com/16690056/204003301-33dcebad-0108-4a95-a01c-96e6c966055f.gif)](https://user-images.githubusercontent.com/16690056/204003301-33dcebad-0108-4a95-a01c-96e6c966055f.gif)

Abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

Use it while it still works 🙃

(Also, hmu on Mastodon: [@n0kovo@infosec.exchange](https://infosec.exchange/@n0kovo))

### Demo:

[![](https://user-images.githubusercontent.com/16690056/204003301-33dcebad-0108-4a95-a01c-96e6c966055f.gif)](https://user-images.githubusercontent.com/16690056/204003301-33dcebad-0108-4a95-a01c-96e6c966055f.gif)

### Usage:

```auto
usage: domaindouche.py [-h] [-n N] -c COOKIE -a USER_AGENT [-w NUM] [-o OUTFILE] keyword

Abuses SecurityTrails API to find related domains by keyword.
Go to https://securitytrails.com/dns-trails, solve any CAPTCHA you might encounter,
copy the raw value of your Cookie and User-Agent headers and use them with the -c and -a arguments.

positional arguments:
  keyword keyword to append brute force string to

options:
  -h, --help show this help message and exit
  -n N, --num N number of characters to brute force (default: 2)
  -c COOKIE, --cookie COOKIE
                        raw cookie string
  -a USER_AGENT, --useragent USER_AGENT
                        user-agent string (must match the browser where the cookies are from)
  -w NUM, --workers NUM
                        number of workers (default: 5)
  -o OUTFILE, --output OUTFILE
                        output file path

```

## GitHub:

[https://github.com/n0kovo/DomainDouche](https://github.com/n0kovo/DomainDouche)