mildew - GitLite

KO | EN

gitlite — search

#python #react #ai #typescript #llm #golang #android #machine-learning #macos #awesome-list #security #pytorch #mcp #ios

mildew

(★ 96)

Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs

파일 탐색기

최종 버전 다운로드 (.zip)

- - main.go
- crt.go
- crt_test.go
- dir.go
- dir_test.go
- mildew.go
- out.go
- parse.go
- parse_test.go
.gitignore
go.mod
go.sum
LICENSE
README.md

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/daehee/mildew

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd mildew

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Go

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Go Go 언어 컴파일러 및 도구 모음입니다.

go build ./...

Go 프로그램을 컴파일해 실행 파일을 만듭니다.

go run .

따로 빌드하지 않고 바로 Go 프로그램을 실행합니다.

✅ 빌드가 에러 없이 끝나면 성공입니다. go run . 을 썼다면 터미널 출력을 확인하세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# mildew

Seed your [DoD VDP](https://hackerone.com/deptofdefense) recon with the latest list of official "dotmil" domains. mildew crawls all the DoD-maintained website directories to scrape unique `.mil` domains. Then it extracts [certificate transparency logs](https://www.certificate-transparency.org/what-is-ct) for each discovered root domain for deeper public domain discovery.

Based on the work of [dotmil-domains](https://github.com/esonderegger/dotmil-domains/) a research project by [esonderegger](https://twitter.com/esonderegger) mapping out the DoD's public-facing domain listings:
> There currently isn't a publicly available directory of all the domain names registered under the US military's .mil top-level domain. Such a directory would be useful for people looking to get an aggregate view of military websites and how they are hosted.

## Install
```
go get -u github.com/daehee/mildew/cmd/mildew
```

## Usage
```
mildew
```

## Data Sources
The official DoD website directories:
* [U.S. Department of Defense](https://www.defense.gov/Resources/Military-Departments/DOD-Websites/)
* [Air Force](http://www.af.mil/AFSites.aspx)
* [Army](http://www.army.mil/info/a-z/)
* [Navy](https://www.navy.mil/Resources/Navy-Directory/)

Certificate transparency logs:
* [Crt.sh](https://crt.sh)

## Report Vulnerabilities
Read the DoD Vulnerability Disclosure Policy and submit a vulnerability report at [HackerOne](https://hackerone.com/deptofdefense).