SubFinder

SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed as a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebins, Internet Archives, etc to find subdomains and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.

Why?

This project began it's life as a Bug Bounty World slack channel discussion. We (@ice3man & @codingo) were talking about how the cornerstone subdomain tool at the time, sublist3r, appeared to have been abandoned. The goal of this project was to make a low dependancy, manageable project in Go that would continue to be maintained over time. I (@Ice3man) decided to rewrite the sublist3r project and posted about it. @codingo offered to contribute to the project and subfinder was born.

So finally after working hard, here is something that I hope you guys will ❤️.

Features

• Powerful Permutation Engine

• Powerful Bruteforcing and resolving engines.

• Search Engine Support for subdomain discovery.

Support for a variety of sources, currently including:

Source
Ask.com
Certspotter
Crt.sh
DNSDumpster
FindSubDomains
HackerTarget
Netcraft
PassiveTotal
Threadcrowd
VirusTotal