2025-03-14 21:59:59 -06:00
|
|
|
# subfinder
|
|
|
|
|
|
|
|
|
|
> Discover valid subdomains for websites.
|
|
|
|
|
> Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
|
|
|
|
|
> More information: <https://github.com/projectdiscovery/subfinder>.
|
|
|
|
|
|
2025-04-03 20:36:56 -06:00
|
|
|
- Find subdomains for a specific domain:
|
2025-03-14 21:59:59 -06:00
|
|
|
|
2025-04-03 20:36:56 -06:00
|
|
|
`subfinder {{[-d|-domain]}} {{example.com}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Show only the subdomains found:
|
|
|
|
|
|
2025-04-03 20:36:56 -06:00
|
|
|
`subfinder -silent {{[-d|-domain]}} {{example.com}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Show only active subdomains:
|
|
|
|
|
|
2025-04-03 20:36:56 -06:00
|
|
|
`subfinder {{[-nW|-active]}} {{[-d|-domain]}} {{example.com}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Use all sources for enumeration:
|
|
|
|
|
|
2025-04-03 20:36:56 -06:00
|
|
|
`subfinder -all {{[-d|-domain]}} {{example.com}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Use a given comma-separated list of [r]esolvers:
|
|
|
|
|
|
2025-04-03 20:36:56 -06:00
|
|
|
`subfinder -r {{8.8.8.8,1.1.1.1,...}} {{[-d|-domain]}} {{example.com}}`
|
