assetfinder

Find domains and subdomains potentially related to a given domain.

Implemented Sources

• crt.sh
• certspotter
• hackertarget
• threatcrowd
• wayback machine
• dns.bufferover.run
• facebook
  • Needs FB_APP_ID and FB_APP_SECRET environment variables set (https://developers.facebook.com/) You need to be careful with your app's rate limits
• virustotal
  • Needs VT_API_KEY environment variable set (https://developers.virustotal.com/reference)
• findsubdomains
  • Needs SPYSE_API_TOKEN environment variable set (the free version always gives the first response page, and you also get "25 unlimited requests") — (https://spyse.com/apidocs)

Installation

go install github.com/tomnomnom/assetfinder@latest

Usage

assetfinder [--subs-only] <domain>

Examples

$ assetfinder offsec.nl
kb.offsec.nl
temp.offsec.nl
temp2.offsec.nl
offsec.nl
offsec.nl
test.offsec.nl
offsec.nl

URL List

• Github.com - assetfinder