How to find all subdomains of a domain

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites by using passive online sources. It has a simple modular architecture and is optimized for speed. subfinder is built for doing one thing only – passive subdomain enumeration, and it does that very well.

Subfinder is designed to comply with all passive sources licenses, and usage restrictions, as well as maintaining a consistently passive model to make it useful to both penetration testers and bug bounty hunters alike.

https://github.com/projectdiscovery/subfinder

To run the software using docker, first install docker on your computer. You can find instructions to install docker at

https://serverok.in/docker

Pull the docker image with the command

docker pull projectdiscovery/subfinder:latest

To find all subdomains of a domain, run

docker run -t projectdiscovery/subfinder:latest -d DOMAIN_NAME_HERE

find all subdomains

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *