subfinder v2.4.6 releases: subdomain discovery tool
SubFinder
SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed at a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebin, Internet Archives, etc to find subdomains, and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.
Features
- Simple and modular code base making it easy to contribute.
- Fast And Powerful Resolution and wildcard elimination module
- Curated passive sources to maximize results (26 Sources as of now)
- Multiple Output formats supported (Json, File, Stdout)
- Optimized for speed, very fast and lightweight on resources
- Stdin and stdout support for integrating in workflows
Changelog v2.4.6
- b3c582d Fixed invalid memory address bug in sitedossier module by @vzamanillo
f346a3a Fixed a bug in the shodan module to display all results by @thezoomerr
63f39b6 Fixed a bug in result output with passivetotal module.
615d480 Fixed a bug in wildcard check by @xuchaoa
bd59f6c Added multiple source print support in results by @tracertea
c1773cd Added Sonarsearch module by @wavvs
6bacefe Added dependency bot
847e188 Added dnsx support for DNS resolution
b92776d Removed deprecated modules certspotterold,cebaidu,ipv4info,ximcx
Installation
go get github.com/Ice3man543/subfinder
Usage
./subfinder -h
This will display help for the tool. Here are all the switches it supports.
Flag | Description | Example |
---|---|---|
-b | Use bruteforcing to find subdomains |
./subfinder -d example.com -b |
-c | Don’t show colored output |
./subfinder -c |
-d | Domain to find subdomains for |
./subfinder -d example.com |
-dL | List of domains to find subdomains for |
./subfinder -dl hosts.txt |
-nW | Remove wildcard subdomains |
./subfinder -nw |
-o | Name of the output file (Optional) |
./subfinder -o output.txt |
-oT | Write output in Aquatone style JSON format (Required -nW) |
./subfinder -o output.txt -nw -oA |
-oJ | Write output in JSON format |
./subfinder -o output.json -oJ |
-oD | Output to directory (When using multiple hosts) |
./subfinder -od ~/misc/out/ |
-r | Comma-separated list of resolvers to use |
./subfinder -r 8.8.8.8,1.1.1.1 |
-rL | File containing list of resolvers to use |
./subfinder -rL resolvers.txt |
–recursive | Use recursive subdomain finding (default: true) |
./subfinder --recursive |
–set-config | Sets a configuration option |
./subfinder --set-config example=something |
–set-settings | Sets a setting option |
./subfinder --set-settings CensysPages=10 |
–silent | Show only the subdomains found |
./subfinder --silent |
–sources | Comma-separated list of sources to use (optional) |
./subfinder --sources threatcrowd,virustotal |
-t | Number of concurrent threads (Bruteforce) |
./subfinder -t 10 |
–timeout | Seconds to wait until quitting connection |
./subfinder --timeout 10 |
-v | Display verbose output |
./subfinder -v |
-w | Wordlist for doing bruteforcing and permutation |
./subfinder -w words.txt |
Copyright (c) Exposed Atoms Pvt Ltd