Skip to content
Find domains and subdomains related to a given domain
Branch: master
Clone or download
Latest commit a4e93ae Jul 18, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
script Initial Jun 23, 2019
.gitignore Adds instructions to README, license etc Jun 23, 2019
LICENSE Adds instructions to README, license etc Jun 23, 2019
README.md Adds urlscan Jul 18, 2019
certspotter.go Initial Jun 23, 2019
crtsh.go Initial Jun 23, 2019
facebook.go Initial Jun 23, 2019
findsubdomains.go Use both the subdomains and subdomains-aggregate endpoints Jun 25, 2019
hackertarget.go Initial Jun 23, 2019
main.go Adds urlscan Jul 18, 2019
ratelimit.go Adds ability to read domains from stdin for patrikf :) Jun 24, 2019
threatcrowd.go Initial Jun 23, 2019
urlscan.go Adds urlscan Jul 18, 2019
virustotal.go Initial Jun 23, 2019
wayback.go Initial Jun 23, 2019

README.md

assetfinder

Find domains and subdomains potentially related to a given domain.

Install

If you have Go installed and configured (i.e. with $GOPATH/bin in your $PATH):

go get -u github.com/tomnomnom/assetfinder

Otherwise download a release for your platform. To make it easier to execute you can put the binary in your $PATH.

Usage

assetfinder [--subs-only] <domain>

Sources

Please feel free to issue pull requests with new sources! :)

Implemented

  • crt.sh
  • certspotter
  • hackertarget
  • threatcrowd
  • wayback machine
  • facebook
    • Needs FB_APP_ID and FB_APP_SECRET environment variables set
    • You need to be careful with your app's rate limits
  • virustotal
    • Needs VT_API_KEY environment variable set
  • findsubdomains
    • Needs SPYSE_API_TOKEN environment variable set (the free version always gives the first response page, and you also get "25 unlimited requests")

Sources to be implemented

TODO

  • Flags to control which sources are used
    • Likely to be all on by default and a flag to disable
  • Read domains from stdin
You can’t perform that action at this time.