+
+
+
+
+
+
+
+ Features • + Install • + Usage • + API Setup • + Library • + Join Discord +
+ +--- + + +`subfinder` is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. `subfinder` is built for +doing one thing only - passive subdomain enumeration, and it does that very well. + +We have made it to comply with all the used passive source licenses and usage restrictions. The passive model guarantees speed and stealthiness that can be leveraged by both penetration testers and bug bounty +hunters alike. + +# Features
| + +## Subfinder with docker + +Pull the latest tagged [subfinder](https://hub.docker.com/r/projectdiscovery/subfinder) docker image: + +```sh +docker pull projectdiscovery/subfinder:latest +``` + +Running `subfinder` using the docker image: + +```sh +docker run projectdiscovery/subfinder:latest -d hackerone.com +``` + +Running `subfinder` using the docker image, with a local config file: + +```sh +docker run -v $HOME/.config/subfinder:/root/.config/subfinder -t projectdiscovery/subfinder -d hackerone.com +``` + + | +
| + +## Subfinder Go library + +Usage example: + +```go +package main + +import ( + "bytes" + "fmt" + "io" + "log" + + "github.com/projectdiscovery/subfinder/v2/pkg/resolve" + "github.com/projectdiscovery/subfinder/v2/pkg/runner" +) + +func main() { + runnerInstance, err := runner.NewRunner(&runner.Options{ + Threads: 10, // Thread controls the number of threads to use for active enumerations + Timeout: 30, // Timeout is the seconds to wait for sources to respond + MaxEnumerationTime: 10, // MaxEnumerationTime is the maximum amount of time in mins to wait for enumeration + Resolvers: resolve.DefaultResolvers, // Use the default list of resolvers by marshaling it to the config + ResultCallback: func(s *resolve.HostEntry) { // Callback function to execute for available host + log.Println(s.Host, s.Source) + }, + }) + + buf := bytes.Buffer{} + err = runnerInstance.EnumerateSingleDomain("projectdiscovery.io", []io.Writer{&buf}) + if err != nil { + log.Fatal(err) + } + + data, err := io.ReadAll(&buf) + if err != nil { + log.Fatal(err) + } + + fmt.Printf("%s", data) +} +``` + + | +