assetfinder :: Knowledge Base (KB)

assetfinder

Find domains and subdomains potentially related to a given domain.

Implemented Sources

crt.sh
certspotter
hackertarget
threatcrowd
wayback machine
dns.bufferover.run
facebook
- Needs FB_APP_ID and FB_APP_SECRET environment variables set (https://developers.facebook.com/) You need to be careful with your app’s rate limits
virustotal
- Needs VT_API_KEY environment variable set (https://developers.virustotal.com/reference)
findsubdomains
- Needs SPYSE_API_TOKEN environment variable set (the free version always gives the first response page, and you also get “25 unlimited requests”) — (https://spyse.com/apidocs)

Installation

go install github.com/tomnomnom/assetfinder@latest

assetfinder [--subs-only] <domain>

$ assetfinder offsec.nl
kb.offsec.nl
temp.offsec.nl
temp2.offsec.nl
offsec.nl
offsec.nl
test.offsec.nl
offsec.nl