subfinder
Discover valid subdomains for websites. tldr-pages
On several platforms
Several platforms
Discover valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
Find subdomains for a specific domain
subfinder -domain example.comIdentifyShow only the subdomains found
subfinder -silent -domain example.comIdentifyShow only active subdomains
subfinder -active -domain example.comIdentifyUse all sources for enumeration
subfinder -all -domain example.comIdentifyUse a given comma-separated list of resolvers
subfinder -r 8.8.8.8,1.1.1.1,... -domain example.comIdentify