nodesub: command-line tool for finding subdomains in bug bounty programs

by do son · August 13, 2023

nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization.

Feature

Perform subdomain enumeration using CIDR notation (Support input list).
Perform subdomain enumeration using ASN (Support input list).
Perform subdomain enumeration using a list of domains.

Installation

To install Nodesub, use the following command:

npm install -g nodesub

NOTE:

Edit File ~/.config/nodesub/config.ini

Usage

Usage: nodesub [options]



Nodesub is a command-line tool for finding subdomains in bug bounty programs.



Options:

  -u, --url <domain>                     Main domain

  -l, --list <file>                      File with list of domains

  -c, --cidr <cidr/file>                 Perform subdomain enumeration using CIDR

  -a, --asn <asn/file>                   Perform subdomain enumeration using ASN

  -dns, --dnsenum                        Enable DNS Enumeration (if you enable this the enumeration process will be slow)

  -rl, --rate-limit <limit>              Rate limit for DNS requests (requests per second) (default: "0")

  -ip, --ips                             Ekstrak IPs in Subdomain Resolved

  -wl, --wildcard                        Filter subdomains by wildcard DNS resolution Default:(False)

  -r, --recursive                        Enable recursive subdomain enumeration

  -p, --permutations                     Enable subdomain permutations

  -re,--resolver <file>                  File with list of resolvers

  -w, --wordlist <file>                  Wordlist file

  -pr, --proxy <proxy>                   Proxy URL

  -pa, --proxy-auth <username:password>  Proxy authentication credentials

  -s, --size <size>                      Max old space size heap Default:(10048 MB)

  -d, --debug                            Show DNS resolution details

  -v, --verbose                          Enable verbose output

  -o, --output <file>                    Output file

  -f, --format <format>                  Output file format (txt, json, csv, pdf) (default: "txt")

  -h, --help                             display help for command

Examples

Enumerate subdomains for a single domain:

nodesub -u example.com
Enumerate subdomains for a list of domains from a file:

nodesub -l domains.txt
Perform subdomain enumeration using CIDR:

node nodesub.js -c 192.168.0.0/24 -o subdomains.txt

node nodesub.js -c CIDR.txt -o subdomains.txt
Perform subdomain enumeration using ASN:

node nodesub.js -a AS12345 -o subdomains.txt

node nodesub.js -a ASN.txt -o subdomains.txt
Enable recursive subdomain enumeration and output the results to a JSON file:

nodesub -u example.com -r -o output.json -f json