Forrest logo
tool overview
On this page you find all important commands for the CLI tool subfinder. If the command you are looking for is missing please ask our AI.

subfinder

Subfinder is a command-line tool designed for discovering subdomains of a given domain. It is written in Go language and provides a fast and efficient way of finding subdomains. With its simple interface, it allows users to easily identify potential attack vectors and gather information about a target domain.

Subfinder uses multiple public and private APIs to perform its scans, ensuring a wide coverage of subdomains. It has a built-in rate limiter to prevent abuse and avoid excessive queries that might result in getting blocked by the target domain's infrastructure.

The tool organizes the results in different formats, including CSV, JSON, and textual output. This enables seamless integration with other tools and further analysis by security professionals. It also has features like filtering and wildcard enumeration to refine the search and focus on specific subdomains of interest.

Subfinder supports a variety of flag options that allow customization of the scanning process. Users can specify the number of threads to use, specify a wordlist for brute-forcing subdomains, and even use it as a library in their own Go programs.

Overall, Subfinder is a versatile and powerful tool that helps security researchers, penetration testers, and bug bounty hunters in discovering subdomains and identifying potential vulnerabilities in target domains.

List of commands for subfinder:

  • subfinder:tldr:0f11a subfinder: Remove wildcard subdomains.
    $ subfinder -nW -d ${example-com}
    try on your machine
    explain this command
  • subfinder:tldr:113e2 subfinder: Find subdomains for a specific domain.
    $ subfinder -d ${example-com}
    try on your machine
    explain this command
  • subfinder:tldr:69ef2 subfinder: Use a brute-force attack to find subdomains.
    $ subfinder -d ${example-com} -b
    try on your machine
    explain this command
  • subfinder:tldr:77f00 subfinder: Use a given comma-separated list of resolvers.
    $ subfinder -r ${8-8-8-8},${1-1-1-1} -d ${example-com}
    try on your machine
    explain this command
  • subfinder:tldr:93f34 subfinder: Show only the subdomains found.
    $ subfinder --silent -d ${example-com}
    try on your machine
    explain this command
tool overview