Name:subfinder
Category:Recon
Publisher:trickest
Created:6/23/2021
Container:quay.io/trickest/subfinder:v2.6.6
Output Type:
License:Unknown

Parameters

​
ip
boolean
-ipinclude host IP in output (-active only)
​
all
boolean
-alluse all sources for enumeration (slow)
​
json
boolean
-jsonwrite output in JSONL(ines) format
​
list
file
-listfile containing list of domains for subdomain discovery
​
match
string
-matchsubdomain or list of subdomain to match (comma separated)
​
proxy
string
-proxyhttp proxy to use with subfinder
​
stats
boolean
-statsreport source statistics
​
active
boolean
-activedisplay active subdomains only
​
config
file
-configflag config file
​
domain
string
required
-domaindomains to find subdomains for (comma separated)
​
filter
string
-filtersubdomain or list of subdomain to filter (comma separated)
​
silent
boolean
-silentshow only subdomains in output
​
sources
string
-sourcesspecific sources to use for discovery (-s crtsh,github).
​
threads
string
-tnumber of concurrent goroutines for resolving (-active only) (default 10)
​
timeout
string
-timeoutseconds to wait before timing out (default 30)
​
verbose
boolean
-vshow verbose output
​
max-time
string
-max-timeminutes to wait for enumeration results (default 10)
​
no-color
boolean
-no-colordisable color in output
​
recursive
boolean
-recursiveuse only sources that can handle subdomains recursively (e.g. subdomain.domain.tld vs domain.tld)
​
resolvers
string
-rcomma separated list of resolvers to use
​
exclude-ip
boolean
-exclude-ipexclude IPs from the list of domains
​
match-file
file
-matchsubdomain or list of subdomain to match
​
rate-limit
string
-rate-limitmaximum number of http requests to send per second (global)
​
filter-file
file
-filtersubdomain or list of subdomain to filter
​
rate-limits
string
-rate-limitsmaximum number of http requests to send per second four providers in key=value format (-rls hackertarget=10/m) (default [github=30/m, fullhunt=60/m, robtex=18446744073709551615/ms, securitytrails=1/s, shodan=1/s, virustotal=4/m, hackertarget=2/s, waybackarchive=15/m, whoisxmlapi=50/s])
​
resolvers-list
file
-rlistfile containing list of resolvers to use
​
collect-sources
boolean
-collect-sourcesinclude all sources in the output (-json only)
​
exclude-sources
string
-exclude-sourcessources to exclude from enumeration (-es alienvault,zoomeyeapi)
​
provider-config
file
-provider-configprovider config file
​
disable-update-check
boolean
-disable-update-checkdisable automatic subfinder update check