Details

Category: Recon

Publisher: trickest-mhmdiaa

Created Date: 2/5/2022

Container: quay.io/trickest/findomain:5.1.1

Source URL: https://github.com/Findomain/Findomain

Parameters

pscan
boolean
Command: --pscan - Enable port scanner.
quiet
boolean
Command: --quiet - Remove informative messages but show fatal errors or subdomains not found message.
aempty
boolean
Command: --aempty - Send alert to webhooks still when no new subdomains have been found.
filter
string
Command: --filter - Filter subdomains containing specifics strings.
jobname
string
Command: --jobname - Use an database identifier for jobs. It is useful when you want to relate different targets into a same job name. To extract the data by job name identifier, use the query-jobname option.
resolved
boolean
Command: --resolved - Show/write only resolved subdomains.
wordlist
file
required
Command: --wordlist - Wordlist file to use in the bruteforce process. Using it option automatically enables bruteforce mode.
ipv6-only
boolean
Command: --ipv6-only - Perform a IPv6 lookup only
last-port
string
Command: --lport - Last port to scan. Default 1000.
randomize
boolean
Command: --randomize - Enable randomization when reading targets from files.
resolvers
file
Command: --resolvers - Path to a file containing a list of DNS IP address. If no specified then Google, Cloudflare and Quad9 DNS servers are used.
enable-dot
boolean
Command: --enable-dot - Enable DNS over TLS for resolving subdomains IPs.
no-monitor
boolean
Command: --no-monitor - Disable monitoring mode while saving data to database.
no-resolve
boolean
Command: --no-resolve - Disable pre-screenshotting jobs (http check and ip discover) when used as resolver to take screenshots.
rate-limit
string
Command: --rate-limit - Set the rate limit in seconds for each target during enumeration.
subdomains
file
required
Command: --file - Use a list of subdomains writen in a file as input.
as-resolver
boolean
Command: --as-resolver - Use Findomain as resolver for a list of domains in a file.
config-file
file
Command: --config - Use a configuration file. The default configuration file is findomain and the format can be toml, json, hjson, ini or yml.
http-status
boolean
Command: --http-status - Check the HTTP status of subdomains.
target-host
string
required
Command: --target - Target host.
user-agents
file
Command: --ua - Path to file containing user agents strings.
http-timeout
string
Command: --http-timeout - Value in seconds for the HTTP Status check of subdomains. Default 5
initial-port
string
Command: --iport - Initial port to scan. Default 0.
no-wildcards
boolean
Command: --no-wildcards - Disable wilcard detection when resolving subdomains.
verbose-mode
boolean
Command: --verbose - Enable verbose mode (useful to debug problems).
postgres-host
string
Command: --postgres-host - Postgresql host.
postgres-port
string
Command: --postgres-port - Postgresql port.
postgres-user
string
Command: --postgres-user - Postgresql username.
query-jobname
string
Command: --query-jobname - Extract all the subdomains from the database where the job name is the specified using the jobname option.
chrome-sandbox
boolean
Command: --sandbox - Enable Chrome/Chromium sandbox. It is disabled by default because a big number of users run the tool using the root user by default. Make sure you are not running the program as root user before using this option.
monitoring-mde
boolean
Command: --monitoring-flag - Activate Findomain monitoring mode
query-database
boolean
Command: --query-database - Query the findomain database to search subdomains that have already been discovered.
exclude-sources
string
Command: --exclude-sources - Exclude sources from searching subdomains in. [possible values: certspotter, crtsh, virustotal, sublist3r, facebook, spyse, bufferover, threatcrowd, virustotalapikey, anubis, urlscan, securitytrails, threatminer,archiveorg, c99, ctsearch]
show-resolved-ip
boolean
Command: --ip - Show/write the ip address of resolved subdomains.
import-subdomains
file
Command: --import-subdomains - Import subdomains from one or multiple files. Subdomains need to be one per line in the file to import.
postgres-database
string
Command: --postgres-database - Postgresql database.
postgres-password
string
Command: --postgres-password - Postgresql password.
external-subdomains
boolean
Command: --external-subdomains - Get external subdomains with amass and subfinder
exclude-subdomain-strings
string
Command: --exclude - Exclude subdomains containing specifics strings.