subfinder v2.4.6 releases: subdomain discovery tool
SubFinder
SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed at a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebin, Internet Archives, etc to find subdomains, and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.
Features
- Simple and modular code base making it easy to contribute.
- Fast And Powerful Resolution and wildcard elimination module
- Curated passive sources to maximize results (26 Sources as of now)
- Multiple Output formats supported (Json, File, Stdout)
- Optimized for speed, very fast and lightweight on resources
- Stdin and stdout support for integrating in workflows
Changelog v2.4.6
- b3c582d Fixed invalid memory address bug in sitedossier module by @vzamanillo
f346a3a Fixed a bug in the shodan module to display all results by @thezoomerr
63f39b6 Fixed a bug in result output with passivetotal module.
615d480 Fixed a bug in wildcard check by @xuchaoa
bd59f6c Added multiple source print support in results by @tracertea
c1773cd Added Sonarsearch module by @wavvs
6bacefe Added dependency bot
847e188 Added dnsx support for DNS resolution
b92776d Removed deprecated modules certspotterold,cebaidu,ipv4info,ximcx
Installation
go get github.com/Ice3man543/subfinder
Usage
./subfinder -h
This will display help for the tool. Here are all the switches it supports.
| Flag | Description | Example |
|---|---|---|
| -b | Use bruteforcing to find subdomains |
./subfinder -d example.com -b |
| -c | Don’t show colored output |
./subfinder -c |
| -d | Domain to find subdomains for |
./subfinder -d example.com |
| -dL | List of domains to find subdomains for |
./subfinder -dl hosts.txt |
| -nW | Remove wildcard subdomains |
./subfinder -nw |
| -o | Name of the output file (Optional) |
./subfinder -o output.txt |
| -oT | Write output in Aquatone style JSON format (Required -nW) |
./subfinder -o output.txt -nw -oA |
| -oJ | Write output in JSON format |
./subfinder -o output.json -oJ |
| -oD | Output to directory (When using multiple hosts) |
./subfinder -od ~/misc/out/ |
| -r | Comma-separated list of resolvers to use |
./subfinder -r 8.8.8.8,1.1.1.1 |
| -rL | File containing list of resolvers to use |
./subfinder -rL resolvers.txt |
| –recursive | Use recursive subdomain finding (default: true) |
./subfinder --recursive |
| –set-config | Sets a configuration option |
./subfinder --set-config example=something |
| –set-settings | Sets a setting option |
./subfinder --set-settings CensysPages=10 |
| –silent | Show only the subdomains found |
./subfinder --silent |
| –sources | Comma-separated list of sources to use (optional) |
./subfinder --sources threatcrowd,virustotal |
| -t | Number of concurrent threads (Bruteforce) |
./subfinder -t 10 |
| –timeout | Seconds to wait until quitting connection |
./subfinder --timeout 10 |
| -v | Display verbose output |
./subfinder -v |
| -w | Wordlist for doing bruteforcing and permutation |
./subfinder -w words.txt |
Copyright (c) Exposed Atoms Pvt Ltd
