Anubis

Anubis DB

The Anubis module performs passive subdomain discovery by querying the Anubis DB API. It is a fast and lightweight module designed to expand the attack surface of a target domain without requiring direct interaction.

Important

Data Attribution: All passive DNS records and associated subdomain intelligence, etc., extracted by this module are exclusively provided by Anubis DB.

Note

This module does not require any API keys or credentials. However, its behavior is governed by the global network and resolver settings. For comprehensive instructions on adjusting network-level settings, refer to the Network Configuration page.

Official Website: https://anubisdb.com/

Capabilities

The module accepts Domains as input and returns a list of associated subdomains.

Extracted Information

The module extracts and returns the following specific properties for a given domain:

• Subdomain: A valid, parsed subdomain associated with the target domain. The module automatically filters out out-of-scope domains and reverse DNS records (e.g., .in-addr.arpa, .ip6.arpa).
• Info: System messages or warnings. For example, if the Anubis API returns an HTTP 403 Forbidden status, the module will output an informational property indicating that the service might be blocking your IP address (advising the use of a VPN).

Security Tagging

Based on the API response, the module automatically enriches the extracted subdomains with contextual tags. The complete list of possible tags assigned by this module includes:

• Attribute Tags:
  • PDNS (Passive DNS): Assigned to all subdomains successfully discovered by this module.
  • Wildcard: Assigned to subdomains that are returned as wildcard DNS records (e.g., *.example.com). Note: The leading *. is stripped from the domain value itself, but the context and this tag are preserved to indicate its wildcard nature.