assetfinder
Tiny, fast passive subdomain finder. Great as an extra source to pipe into anew alongside subfinder.
Tags: subdomains, passive, tomnomnom
- Category
- recon
- Maintenance signal
- slow
Use this when: Intake. Use this on a root you are allowed to resolve. The output is a host list, not a finding.
Install
go
go install github.com/tomnomnom/assetfinder@latestCommand templates
Subdomains only
assetfinder --subs-only {domain}