Link Search Menu Expand Document


Discover valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. More information:

  • Find subdomains for a specific [d]omain:

subfinder -d {{}}

  • Show only the subdomains found:

subfinder --silent -d {{}}

  • Use a brute-force attack to find subdomains:

subfinder -d {{}} -b

  • Remove wildcard subdomains:

subfinder -nW -d {{}}

  • Use a given comma-separated list of [r]esolvers:

subfinder -r {{,,...}} -d {{}}