aboul3la/Sublist3r
Sublist3r
Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by querying search engines and public intelligence sources. It functions as a security tool for identifying the digital footprint of a target domain.
The project provides both passive enumeration through multi-source API aggregation and active discovery via a DNS brute force tool. It includes a TCP port scanner to identify active services and open ports on discovered subdomains, facilitating attack surface mapping.
The tool can be used as a standalone utility or as a Python security library, exposing its core logic as a module for integration into custom automation scripts. Discovered network identifiers can be persisted to text files for external analysis.
Features
- Subdomain Enumeration Tools - Discovers all possible subdomains for a target domain by querying search engines and public intelligence sources.
- Passive Reconnaissance - Provides a comprehensive framework for gathering subdomains through multi-source API aggregation and search engine queries.
- Reconnaissance Frameworks - Provides a framework for gathering target information from external sources without interacting directly with the server.
- Multi-Source Data Aggregation - Collects subdomain data by aggregating results from multiple search engines and public intelligence sources.
- Attack Surface Mapping - Identifies accessible services and open ports across a network of subdomains to map the attack surface.
- Information Gathering Tools - Collects public domain information to map a target's digital footprint for reconnaissance.
- Penetration Testing Suites - Facilitates security assessments by gathering target infrastructure data and discovering hidden hostnames.
- Hostname Brute Forcing - Uses concurrent request threads to rapidly test wordlists of potential hostnames against a target domain.
- Python Library Integrations - Provides a programmatic Python interface for integrating subdomain enumeration into custom automation scripts.
- TCP Port Scanners - Identifies active services by attempting direct TCP network connections to specific ports on discovered hosts.
- DNS Brute Force Tools - Identifies hidden hostnames by testing large lists of potential subdomains against a target.
- Python Security Libraries - Provides a programmatic interface for integrating subdomain discovery and enumeration into custom security scripts.
- DNS Brute Forcing - Uncovers hidden subdomains by testing large wordlists of potential hostnames against a domain.
- Subdomain Brute Forcing - Discovers hidden subdomains by testing a wordlist of potential hostnames using threaded requests.
- Modular Scriptable Interfaces - Exposes core enumeration logic as a Python module for integration into larger automation workflows.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Reconnaissance Tools - Fast tool for subdomain enumeration.
- Subdomain Enumeration - Fast subdomain enumeration for penetration testers.
- Application Security - Fast subdomain enumeration for penetration testing.
- DNS Security - Fast subdomain enumeration tool for penetration testing.
- Domain Enumeration - Subdomain enumeration tool aggregating multiple passive sources.
- Domain Reconnaissance - Enumerates subdomains using various search engines.
- Network Reconnaissance - Enumerates subdomains using various open-source intelligence sources.
- Network Reconnaissance Tools - Tool for fast subdomain enumeration.
- Subdomain Enumeration - Fast subdomain enumeration tool for penetration testers.
- Vulnerability Scanning - Fast subdomain enumeration for penetration testers.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
