Find domains and subdomains potentially related to a given domain.
If you have Go installed and configured (i.e. with $GOPATH/bin in your $PATH):
go install github.com/cybercdh/assetfinder@cybercdh
Otherwise download a release for your platform.
To make it easier to execute you can put the binary in your $PATH.
assetfinder [--subs-only] <domain>
Please feel free to issue pull requests with new sources! :)
- jldc.me
- dnshistory.org
- Arquivo
- Maltiverse
- AlienVault
- dnsspy.io
- crt.sh
- certspotter
- hackertarget
- threatcrowd
- wayback machine
- Need to use the
-wflag to enable this as it sometimes is quite slow.
- Need to use the
- dns.bufferover.run
- facebook
- Needs
FB_APP_IDandFB_APP_SECRETenvironment variables set (https://developers.facebook.com/) - You need to be careful with your app's rate limits
- Needs
- virustotal
- Needs
VT_API_KEYenvironment variable set (https://developers.virustotal.com/reference)
- Needs
findsubdomainsNeedsSPYSE_API_TOKENenvironment variable set (the free version always gives the first response page, and you also get "25 unlimited requests") — (https://spyse.com/apidocs)
- riddler.io
- Needs
RIDDLER_EMAILandRIDDLER_PASSenvironment variables to be set (https://riddler.io/)
- Needs
http://api.passivetotal.org/api/docs/https://community.riskiq.com/https://riddler.io/- http://www.dnsdb.org/
- https://certdb.com/api-documentation
- Flags to control which sources are used
- Likely to be all on by default and a flag to disable
Read domains from stdin