daffainfo
/
subfinder
mirror of https://github.com/daffainfo/subfinder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
65 Commits
4 Branches
35 Tags
8.6 MiB
Go 99.5%
Makefile 0.3%
Dockerfile 0.2%
 
 
 
Go to file
Nizamul Rana e54f94e5cc Updated README 2018-04-15 19:04:56 +05:30
libsubfinder Remove stale DnsDB Data Source 2018-04-14 12:11:25 +05:30
.gitignore Fixed gitignore to ignore executable 2018-04-03 14:58:20 +05:30
DOCS.md Added DOCS.md and some extra changes 2018-04-14 12:47:42 +05:30
ISSUE_TEMPLATE.md Create ISSUE_TEMPLATE.md 2018-04-09 14:35:33 +10:00
LICENSE Initial commit 2018-03-31 15:14:58 +05:30
README.md Updated README 2018-04-15 19:04:56 +05:30
config.json Updated config.json file 2018-04-14 12:12:38 +05:30
main.go Updated main.go and other features 2018-04-14 12:09:27 +05:30
process.go Updated process.go 2018-04-04 17:03:02 +05:30

README.md

SubFinder

License Twitter Twitter

SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed as a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebins, Internet Archives, etc to find subdomains and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.

SubFinder CLI Options

Why?

This project began it's life as a Bug Bounty World slack channel discussion. We (@ice3man & @codingo) were talking about how the cornerstone subdomain tool at the time, sublist3r, appeared to have been abandoned. The goal of this project was to make a low dependancy, manageable project in Go that would continue to be maintained over time. I (@Ice3man) decided to rewrite the sublist3r project and posted about it. @codingo offered to contribute to the project and subfinder was born.

So finally after working hard, here is something that I hope you guys will ❤️.

Features

  • Simple and modular code base making it easy to contribute.
  • Fast And Powerful Bruteforcing Module (In Development)
  • Powerful Permutation generation engine. (In Development)
  • Many Passive Data Sources (CertDB, CertSpotter, crtsh, DNSDumpster, FindSubdomains, Hackertarget, Netcraft, PassiveTotal, PTRArchive, SecurityTrails, Threatcrowd, VirusTotal)
  • Internet Archives support for finding subdomains (In development)

Install

The installation is easy. Git clone the repo and run go build.

go get github.com/ice3man543/subfinder

To configure it to work with certain services, you need to have an API key for them. These are the services that do not work without an API key.

Put these values in the config.json file and you should be good to go.

NOTE

This tool is currently in active development. So some features may not work or maybe broken. Please do a PR or create an Issue for any features, suggestions or ideas. Would love to hear from you guys.