Findomain - A Cross-Platform Tool That Role Certificate Transparency Logs To Honor Subdomains


H5N1 cross-platform tool that purpose Certificates Transparency logs to detect subdomains. We currently back upward Linux, Windows in addition to MacOS.

How it works?
It tool doesn't purpose the mutual methods for sub(domains) discover, the tool uses Certificate Transparency logs to detect subdomains in addition to it method arrive tool rattling faster in addition to reliable. The tool brand purpose of multiple world available APIs to perform the search. If you lot desire to know to a greater extent than nigh Certificate Transparency logs, read https://www.certificate-transparency.org/

Installation Linux
If you lot desire to install it, you lot tin create that manually compiling the source or using the precompiled binary.
Manually: You take away to direct maintain Rust installed inward your figurer first.
$ git clone https://github.com/Edu4rdSHL/findomain.git $ cd findomain $ cargo laid upward --release $ sudo cp target/release/findomain /usr/bin/ $ findomain
Using the binary:
$ wget https://github.com/Edu4rdSHL/findomain/releases/latest/download/findomain-linux $ chmod +x findomain-linux $ ./findomain-linux
If you lot are using the BlackArch Linux distribution, you lot only take away to use:
$ sudo pacman -S findomain

Installation Windows
Download the binary from https://github.com/Edu4rdSHL/findomain/releases/latest/download/findomain-windows.exe
Open a CMD vanquish in addition to become to the dir where findomain-windows.exe was downloaded.
Exec: findomain-windows inward the CMD shell.

Installation MacOS
$ wget https://github.com/Edu4rdSHL/findomain/releases/latest/download/findomain-osx $ chmod +x findomain-osx.dms $ ./findomain-osx.dms

Usage
You tin purpose the tool inward 2 ways, exclusively discovering the domain advert or discovering the domain + the IP address.
findomain 0.1.4 Eduard Tolosa  H5N1 tool that purpose Certificates Transparency logs to detect subdomains.  USAGE:     findomain [FLAGS] [OPTIONS]  FLAGS:     -a, --all-apis    Use all the available APIs to perform the search. It direct maintain to a greater extent than fourth dimension but you lot volition direct maintain a lot of                       to a greater extent than results.     -h, --help        Prints tending information     -i, --get-ip      Return the subdomain listing amongst IP address if resolved.     -V, --version     Prints version information  OPTIONS:     -f, --file         Sets the input file to use.     -o, --output     Write information to output file inward the specified format. [possible values: txt, csv, json]     -t, --target     Target host

Examples
  1. Make a elementary search of subdomains in addition to impress the information inward the screen:
findomain -t example.com
  1. Make a elementary search of subdomains using all the APIs in addition to impress the information inward the screen:
findomain -t example.com -a
  1. Make a search of subdomains in addition to export the information to a CSV file:
findomain -t example.com -o csv
  1. Make a search of subdomains using all the APIs in addition to export the information to a CSV file:
findomain -t example.com -a -o csv
  1. Make a search of subdomains in addition to resolve the IP address of subdomains (if possible):
findomain -t example.com -i
  1. Make a search of subdomains amongst all the APIs in addition to resolve the IP address of subdomains (if possible):
findomain -t example.com -i -a
  1. Make a search of subdomains amongst all the APIs in addition to resolve the IP address of subdomains (if possible), exporting the information to a CSV file:
findomain -t example.com -i -a -o csv

Features
  • Discover subdomains without brute-force, it tool uses Certificate Transparency Logs.
  • Discover subdomains amongst or without IP address according to user arguments.
  • Read target from user declaration (-t).
  • Read a listing of targets from file in addition to discovery their subdomains amongst or without IP in addition to also write to output files per-domain if specified past times the user, recursively.
  • Write output to TXT file.
  • Write output to CSV file.
  • Write output to JSON file.
  • Cross platform support: Linux, Windows, MacOS.
  • Optional multiple API support.

Issues in addition to requests
If you lot direct maintain a work or a characteristic request, opened upward an issue.