SubFinder - Powerfull Sub-domain Enumeration Tool

SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed as a successor to the sublist3r project. SubFinder uses Passive Sources, Search Engines, Pastebins, Internet Archives, etc to find subdomains and then it uses a permutation module inspired by altdns to generate permutations and resolve them quickly using a powerful bruteforcing engine. It can also perform plain bruteforce if needed. The tool is highly customizable, and the code is built with a modular approach in mind making it easy to add functionalities and remove errors.

  • Simple and modular code base making it easy to contribute.
  • Fast And Powerful Bruteforcing Module
  • Powerful Permutation generation engine. (In Development)
  • Many Passive Data Sources (29 At Present)
  • Multiple Output formats
Ask,, Baidu, Bing, Censys, CertDB, CertSpotter, CrtSH, DnsDB, DNSDumpster, Dogpile, Entrust CT-Search, Exalead, FindSubdomains, Hackertarget, IPv4Info, Netcraft, PassiveTotal, PTRArchive, Riddler, SecurityTrails, SiteDossier, Shodan, SSL Certificates, ThreatCrowd, ThreatMiner, Virustotal, WaybackArchive, Yahoo
./subfinder -h 
Direct Installation
SubFinder requires go1.10+ to install successfully !
The installation is easy. Git clone the repo and run go build.
go get