WEB12 commands

Subfinder

Fast passive subdomain discovery tool using multiple public sources including APIs, certificate transparency logs, and DNS datasets.

Basic Enumeration#01

Discover subdomains for a target domain

$subfinder -d target.com

Save to File#02

Write discovered subdomains to an output file

$subfinder -d target.com -o subdomains.txt

Silent Mode#03

Output only subdomains, no banner or status

$subfinder -d target.com -silent

All Sources#04

Use all available passive sources including paid APIs

$subfinder -d target.com -all

Multiple Domains#05

Enumerate subdomains for a list of domains from a file

$subfinder -dL domains.txt -o all_subs.txt

JSON Output#06

Output results in JSON format for toolchain integration

$subfinder -d target.com -oJ -o output.json

Custom Resolvers#07

Use specific DNS resolvers for resolution

$subfinder -d target.com -r 8.8.8.8,1.1.1.1

Verbose Mode#08

Show source attribution for each discovered subdomain

$subfinder -d target.com -v

Pipe to Httpx#09

Discover subdomains and probe them for live HTTP services

$subfinder -d target.com -silent | httpx -silent -title -status-code

Exclude Sources#10

Skip specific passive sources during enumeration

$subfinder -d target.com -es crtsh,threatcrowd

Set Timeout#11

Set per-source timeout in seconds

$subfinder -d target.com -timeout 30

Thread Count#12

Control the number of concurrent sources queried

$subfinder -d target.com -t 20

D3F4

>Loading command center_