assetfinder

Find domains and subdomains potentially related to a given domain.

Implemented Sources

  • crt.sh
  • certspotter
  • hackertarget
  • threatcrowd
  • wayback machine
  • dns.bufferover.run
  • facebook
  • virustotal
  • findsubdomains
    • Needs SPYSE_API_TOKEN environment variable set (the free version always gives the first response page, and you also get “25 unlimited requests”) — (https://spyse.com/apidocs)

Installation

go install github.com/tomnomnom/assetfinder@latest

Usage

assetfinder [--subs-only] <domain>

Examples

$ assetfinder offsec.nl
kb.offsec.nl
temp.offsec.nl
temp2.offsec.nl
offsec.nl
offsec.nl
test.offsec.nl
offsec.nl

URL List