subfinder
subfinder
TLDR
Find subdomains for a specific domain
$ subfinder -d [example.com]
Show only the subdomains found
$ subfinder --silent -d [example.com]
Use a brute-force attack to find subdomains
$ subfinder -d [example.com] -b
Remove wildcard subdomains
$ subfinder -nW -d [example.com]
Use a given comma-separated list of resolvers
$ subfinder -r [8.8.8.8],[1.1.1.1] -d [example.com]
