Install Subfinder Subfinder is a passive subdomain discovery Subfinder API Setup tool made by Project Subfinder Config File Discovery. The Subfinder API Sources following subfinder Example Subfinder API Config File cheat sheet provides an overview of the Subfinder Usage command flags for Example Subfinder Commands Subfinder and common Find Subdomains Single Domain command examples for real world usage. Verify Subfinder Results With HTTPX Subfinder can be used Subfinder + Naabu Portscan to obtain a number of valid subdomains both Conclusion passively and actively, Document Changelog to identify more attack surface for penetration testing or bug bounty recon or assessment.
Install Subfinder
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfin
Subfinder works straight after install, however with API keys (even a free key) will improve passive subdomain results.
Subfinder Flags & Syntax
root:~# subfinder -h
Subfinder API Setup
Configuring Subfinder to use free or paid API services will likely improve the discovered domains the tool can find. You can list the sources Subfinder uses by running subfinder -ls .
Subfinder Config File
In order to setup subfinder API keys you need to create or modify the existing configuration file. The filesystem location for the subfinder config file is at: $HOME/.config/subfinder/provider-config.yaml the subfinder config file needs to be populated with the API keys that you will need to obtain from the various sources that have (kindly) been listed below.
Subfinder API Sources
Subfinder supports the following data API sources:
Conclusion We hope you found this Subfinder cheat sheet useful, and it helps you get started with this powerful subdomain enumeration tool to find more assets for assessment.
