Findomain/Findomain
Findomain
Findomain is a subdomain discovery tool and DNS resolver used for mapping an organization's external attack surface. It functions as a DNS infrastructure analyzer that searches for registered subdomains associated with a root domain to uncover undocumented infrastructure and services.
The project includes an attack surface monitor that tracks changes to subdomains over time, using differential state monitoring to identify newly created or deleted assets. It provides real-time alerting via webhooks when changes in the monitored domain surface are detected.
The system performs high-speed DNS resolution using multi-threaded queries and custom DNS server integration. Its capabilities extend to capturing visual evidence of active web services through headless browser screenshotting and consolidating reconnaissance data by importing subdomain lists from external tools.
Features
- Attack Surface Mapping - Maps an organization's public digital footprint by identifying all registered subdomains and IP addresses.
- Subdomain Discoveries - Provides a comprehensive system for discovering and mapping all registered subdomains to uncover an organization's external attack surface.
- Subdomain Discovery - Searches for hidden or undocumented subdomains associated with a root domain.
- DNS Resolution - Performs bulk resolution of subdomains to IP addresses for network routing analysis.
- Parallel Resolution - Implements high-speed bulk DNS resolution using multi-threaded query distribution.
- Attack Surface Management - Monitors the external attack surface by tracking subdomain changes and sending real-time alerts.
- Custom DNS Resolvers - Provides the ability to specify custom external DNS servers for host resolution.
- Passive Reconnaissance Aggregators - Aggregates subdomain data from multiple external public sources to build a comprehensive asset list.
- Infrastructure Monitoring - Tracks changes to subdomains over time to monitor the evolution of network infrastructure.
- Asset Delta Monitoring - Tracks the addition or removal of subdomains to detect changes in the attack surface.
- State Change Monitoring - Tracks changes in the discovered subdomain state to identify new or removed assets.
- Domain Analysis - Inspects domain infrastructure by resolving IPs and capturing screenshots to identify open ports.
- IP and DNS Discovery - Analyzes DNS infrastructure by resolving subdomains and capturing visual evidence of active services.
- Browser Screenshot Capture - Captures visual evidence of active web services on discovered subdomains using headless browsers.
- Reconnaissance Result Aggregators - Consolidates subdomain discovery data from multiple external reconnaissance tools into a unified dataset.
- Reconnaissance and Discovery - Fast domain recognition tool with screenshotting, port scan, and subdomain monitoring.
- Subdomain Enumeration - Fast, cross-platform subdomain enumeration.
- Application Security - High-performance cross-platform subdomain enumerator.
