subfinder
Subdomain discovery
A tool for passive subdomain enumeration using online sources
Fast passive subdomain enumeration tool.
10k stars
154 watching
1k forks
Language: Go
last commit: about 1 month ago
Linked from 2 awesome lists
bugbountyhackingosintreconnaissancesubdomain-enumerationsubdomains
carpedm20/awesome-hacking
vavkamil/awesome-bugbounty-toolsRelated projects:
| Repository | Description | Stars |
|---|---|---|
 aboul3la/sublist3r | A tool designed to automate the process of discovering subdomains from a given domain name | 9,947 |
 therook/subbrute | A tool for automating the discovery of subdomains and DNS records by using open resolvers as a proxy to circumvent rate limiting. | 3,372 |
| projectdiscovery/shuffledns | A tool for enumerating and resolving subdomains using active bruteforce and wildcard filtering. | 1,345 |
 skynet0x01/tugarecon | A tool designed to collect and gather subdomains for penetration testing and bug hunting. | 153 |
 lijiejie/subdomainsbrute | A tool for automatically discovering subdomains of given domains | 3,502 |
 nexxai/substr3am | Tools to enumerate subdomains by monitoring SSL certificate issuance | 67 |
| projectdiscovery/chaos-client | An open-source tool for querying the Chaos DB API to enumerate subdomains of given domains | 657 |
 m8sec/subscraper | A subdomain enumeration tool used to identify potential vulnerabilities in online services | 832 |
 findomain/findomain | A tool that automates domain reconnaissance and monitoring by integrating multiple techniques such as screenshoting, port scanning, and API checks. | 3,352 |
 tomnomnom/assetfinder | A tool that identifies domains and subdomains associated with a given domain | 3,080 |
 christophetd/censys-subdomain-finder | An open source tool for finding subdomains using Censys Certificate Transparency logs | 752 |
 esc4icescesc/skanuvaty | A fast and concurrent DNS/network scanner that identifies subdomains and their corresponding IPs. | 890 |
 guelfoweb/knock | A tool that uses passive reconnaissance and dictionary scan to quickly enumerate subdomains on a target domain. | 3,902 |
 blacklanternsecurity/bbot | Automates reconnaissance and vulnerability scanning of internet targets | 7,343 |
 rohitcoder/subr3con | Tools for enumerating and testing subdomains for vulnerability | 18 |