subfinder v2.3.4 releases: subdomain discovery tool
SubFinder
SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed at a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebin, Internet Archives, etc to find subdomains and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.
Features
- Simple and modular code base making it easy to contribute.
- Fast And Powerful Resolution and wildcard elimination module
- Curated passive sources to maximize results (26 Sources as of now)
- Multiple Output formats supported (Json, File, Stdout)
- Optimized for speed, very fast and lightweight on resources
- Stdin and stdout support for integrating in workflows
Changelog v2.3.4
- Added Spyse source
- Optional upload to chaos
- Refactored rapiddns source
Installation
go get github.com/Ice3man543/subfinder
Usage
./subfinder -h
This will display help for the tool. Here are all the switches it supports.
| Flag | Description | Example |
|---|---|---|
| -b | Use bruteforcing to find subdomains | ./subfinder -d example.com -b |
| -c | Don’t show colored output | ./subfinder -c |
| -d | Domain to find subdomains for | ./subfinder -d example.com |
| -dL | List of domains to find subdomains for | ./subfinder -dl hosts.txt |
| -nW | Remove wildcard subdomains | ./subfinder -nw |
| -o | Name of the output file (Optional) | ./subfinder -o output.txt |
| -oT | Write output in Aquatone style JSON format (Required -nW) | ./subfinder -o output.txt -nw -oA |
| -oJ | Write output in JSON format | ./subfinder -o output.json -oJ |
| -oD | Output to directory (When using multiple hosts) | ./subfinder -od ~/misc/out/ |
| -r | Comma-separated list of resolvers to use | ./subfinder -r 8.8.8.8,1.1.1.1 |
| -rL | File containing list of resolvers to use | ./subfinder -rL resolvers.txt |
| –recursive | Use recursive subdomain finding (default: true) | ./subfinder --recursive |
| –set-config | Sets a configuration option | ./subfinder --set-config example=something |
| –set-settings | Sets a setting option | ./subfinder --set-settings CensysPages=10 |
| –silent | Show only the subdomains found | ./subfinder --silent |
| –sources | Comma-separated list of sources to use (optional) | ./subfinder --sources threatcrowd,virustotal |
| -t | Number of concurrent threads (Bruteforce) | ./subfinder -t 10 |
| –timeout | Seconds to wait until quitting connection | ./subfinder --timeout 10 |
| -v | Display verbose output | ./subfinder -v |
| -w | Wordlist for doing bruteforcing and permutation | ./subfinder -w words.txt |
Copyright (c) Exposed Atoms Pvt Ltd
