tldr/pages/common/subfinder.md

subfinder

Discover valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. More information: https://github.com/projectdiscovery/subfinder.

• Find subdomains for a specific [d]omain:

subfinder -d {{example.com}}

• Show only the subdomains found:

subfinder --silent -d {{example.com}}

• Use a brute-force attack to find subdomains:

subfinder -d {{example.com}} -b

• Remove wildcard subdomains:

subfinder -nW -d {{example.com}}

• Use a given comma-separated list of [r]esolvers:

subfinder -r {{8.8.8.8,1.1.1.1,...}} -d {{example.com}}