2018-07-15 11:23:35 +01:00
|
|
|
# subfinder
|
|
|
|
|
|
2024-02-14 20:25:13 +00:00
|
|
|
> Discover valid subdomains for websites.
|
2018-07-15 11:23:35 +01:00
|
|
|
> Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
|
2024-02-15 09:05:41 +00:00
|
|
|
> More information: <https://github.com/projectdiscovery/subfinder>.
|
2018-07-15 11:23:35 +01:00
|
|
|
|
2024-02-15 09:05:41 +00:00
|
|
|
- Find subdomains for a specific [d]omain:
|
2018-07-15 11:23:35 +01:00
|
|
|
|
|
|
|
|
`subfinder -d {{example.com}}`
|
|
|
|
|
|
|
|
|
|
- Show only the subdomains found:
|
|
|
|
|
|
|
|
|
|
`subfinder --silent -d {{example.com}}`
|
|
|
|
|
|
2021-05-20 21:13:41 +01:00
|
|
|
- Use a brute-force attack to find subdomains:
|
2018-07-15 11:23:35 +01:00
|
|
|
|
|
|
|
|
`subfinder -d {{example.com}} -b`
|
|
|
|
|
|
|
|
|
|
- Remove wildcard subdomains:
|
|
|
|
|
|
|
|
|
|
`subfinder -nW -d {{example.com}}`
|
|
|
|
|
|
2024-02-15 09:05:41 +00:00
|
|
|
- Use a given comma-separated list of [r]esolvers:
|
2018-07-15 11:23:35 +01:00
|
|
|
|
2024-01-31 03:55:19 +00:00
|
|
|
`subfinder -r {{8.8.8.8,1.1.1.1,...}} -d {{example.com}}`
|
