subfinder v2.6.4 releases: subdomain discovery tool
SubFinder
SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed at a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebin, Internet Archives, etc to find subdomains, and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.
Features
- Simple and modular code base making it easy to contribute.
- Fast And Powerful Resolution and wildcard elimination module
- Curated passive sources to maximize results (26 Sources as of now)
- Multiple Output formats supported (Json, File, Stdout)
- Optimized for speed, very fast and lightweight on resources
- Stdin and stdout support for integrating in workflows
Changelog v2.6.4
- Added pagination support to SecurityTrails source by @dogancanbakir in #1105
- Added extended limit for crtsh source with
-alloption is used by @dogancanbakir in #1123 - Fixed build failure on
termux/androidby @RamanaReddy0M in #1053 - Fixed VirusTotal pagination issue by @dogancanbakir in #1110
- Fixed BinaryEdge pagination issue by @dogancanbakir in #1109
- Fixed issue with case-sensitive domain input with
-dLoption by @dogancanbakir in #1072 - Improved DNSDB source to use v2 api with offset by @kelvinatorr in #1006
- Improved config file path creation by OS by @dogancanbakir in #1013
- Improved 360Quake subdomain query by @chushuai in #1031
- Improved subdomain handling from fofa source by @ZuoJunhao in #1047
- Disabled riddler source by @dogancanbakir in #1111
Installation
go get github.com/Ice3man543/subfinder
Usage
./subfinder -h
This will display help for the tool. Here are all the switches it supports.
| Flag | Description | Example |
|---|---|---|
| -b | Use bruteforcing to find subdomains |
./subfinder -d example.com -b |
| -c | Don’t show colored output |
./subfinder -c |
| -d | Domain to find subdomains for |
./subfinder -d example.com |
| -dL | List of domains to find subdomains for |
./subfinder -dl hosts.txt |
| -nW | Remove wildcard subdomains |
./subfinder -nw |
| -o | Name of the output file (Optional) |
./subfinder -o output.txt |
| -oT | Write output in Aquatone style JSON format (Required -nW) |
./subfinder -o output.txt -nw -oA |
| -oJ | Write output in JSON format |
./subfinder -o output.json -oJ |
| -oD | Output to directory (When using multiple hosts) |
./subfinder -od ~/misc/out/ |
| -r | Comma-separated list of resolvers to use |
./subfinder -r 8.8.8.8,1.1.1.1 |
| -rL | File containing list of resolvers to use |
./subfinder -rL resolvers.txt |
| –recursive | Use recursive subdomain finding (default: true) |
./subfinder --recursive |
| –set-config | Sets a configuration option |
./subfinder --set-config example=something |
| –set-settings | Sets a setting option |
./subfinder --set-settings CensysPages=10 |
| –silent | Show only the subdomains found |
./subfinder --silent |
| –sources | Comma-separated list of sources to use (optional) |
./subfinder --sources threatcrowd,virustotal |
| -t | Number of concurrent threads (Bruteforce) |
./subfinder -t 10 |
| –timeout | Seconds to wait until quitting connection |
./subfinder --timeout 10 |
| -v | Display verbose output |
./subfinder -v |
| -w | Wordlist for doing bruteforcing and permutation |
./subfinder -w words.txt |
Copyright (c) Exposed Atoms Pvt Ltd
