How to find all subdomains of a domain
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites by using passive online sources. It has a simple modular architecture and is optimized for speed. subfinder is built for doing one thing only – passive subdomain enumeration, and it does that very well.
Subfinder is designed to comply with all passive sources licenses, and usage restrictions, as well as maintaining a consistently passive model to make it useful to both penetration testers and bug bounty hunters alike.
https://github.com/projectdiscovery/subfinder
To run the software using docker, first install docker on your computer. You can find instructions to install docker at
Pull the docker image with the command
|
1 |
docker pull projectdiscovery/subfinder:latest |
To find all subdomains of a domain, run
|
1 |
docker run -t projectdiscovery/subfinder:latest -d DOMAIN_NAME_HERE |
