subfinder

Command: -ip - include host IP in output (-active only)

Command: -all - use all sources for enumeration (slow)

Command: -json - write output in JSONL(ines) format

Command: -list - file containing list of domains for subdomain discovery

Command: -match - subdomain or list of subdomain to match (comma separated)

Command: -proxy - http proxy to use with subfinder

Command: -stats - report source statistics

Command: -active - display active subdomains only

Command: -config - flag config file

Command: -domain - domains to find subdomains for (comma separated)

Command: -filter - subdomain or list of subdomain to filter (comma separated)

Command: -silent - show only subdomains in output

Command: -sources - specific sources to use for discovery (-s crtsh,github).

Command: -t - number of concurrent goroutines for resolving (-active only) (default 10)

Command: -timeout - seconds to wait before timing out (default 30)

Command: -v - show verbose output

Command: -max-time - minutes to wait for enumeration results (default 10)

Command: -no-color - disable color in output

Command: -recursive - use only sources that can handle subdomains recursively (e.g. subdomain.domain.tld vs domain.tld)

Command: -r - comma separated list of resolvers to use

Command: -exclude-ip - exclude IPs from the list of domains

Command: -match - subdomain or list of subdomain to match

Command: -rate-limit - maximum number of http requests to send per second (global)

Command: -filter - subdomain or list of subdomain to filter

Command: -rate-limits - maximum number of http requests to send per second four providers in key=value format (-rls hackertarget=10/m) (default [github=30/m, fullhunt=60/m, robtex=18446744073709551615/ms, securitytrails=1/s, shodan=1/s, virustotal=4/m, hackertarget=2/s, waybackarchive=15/m, whoisxmlapi=50/s])

Command: -rlist - file containing list of resolvers to use

Command: -collect-sources - include all sources in the output (-json only)

Command: -exclude-sources - sources to exclude from enumeration (-es alienvault,zoomeyeapi)

Command: -provider-config - provider config file

Command: -disable-update-check - disable automatic subfinder update check