findomain v9.0.1 releases: cross-platform tool that use Certificate Transparency logs to find subdomains

Findomain

findomain is a cross-platform tool that uses Certificates Transparency logs to find subdomains. We currently support Linux, Windows, and MacOS.

How does it work?

It tool doesn’t use the common methods for sub(domains) discover, the tool uses Certificate Transparency logs to find subdomains and it method make it tool very faster and reliable. The tool makes use of multiple public available APIs to perform the search. If you want to know more about Certificate Transparency logs, read https://www.certificate-transparency.org/

Features

• Discover subdomains without brute-force, it tool uses Certificate Transparency Logs.
• Discover subdomains with or without IP addresses according to user arguments.
• Read the target from the user argument (-t).
• Read a list of targets from file and discover their subdomains with or without IP and also write to output files per-domain if specified by the user, recursively.
• Write output to the TXT file.
• Write output to the CSV file.
• Write output to the JSON file.
• Cross-platform support: Linux, Windows, MacOS.

Changelog v9.0.1

Changes

• Exclude private IP addresses from the scan. 0f6c2ac
• Now that we parse the IP Address, there is no need to check if it’s empty or is some invalid string. d2c43f1

CI/CD Changes

• Add matrices to build-macos job. 44b6f8e
• Add docker workflow to build multi-platform image. 6bc7a94

Misc

• Improve spelling, grammar, and structure of README.md. 69fae8a

Use

Example

1. Make a simple search of subdomains and print the info in the screen:

findomain -t example.com

2. Make a simple search of subdomains using all the APIs and print the info in the screen:

findomain -t example.com -a

3. Make a search of subdomains and export the data to a CSV file:

findomain -t example.com -o csv

4. Make a search of subdomains using all the APIs and export the data to a CSV file:

findomain -t example.com -a -o csv

5. Make a search of subdomains and resolve the IP address of subdomains (if possible):

findomain -t example.com -i

6. Make a search of subdomains with all the APIs and resolve the IP address of subdomains (if possible):

findomain -t example.com -i -a

7. Make a search of subdomains with all the APIs and resolve the IP address of subdomains (if possible), exporting the data to a CSV file:

findomain -t example.com -i -a -o csv

Download

Copyright (C) 2019  Edu4rdSHL

Source: https://github.com/Edu4rdSHL/