Sublist3r

Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by querying search engines and public intelligence sources. It functions as a security tool for identifying the digital footprint of a target domain.

The project provides both passive enumeration through multi-source API aggregation and active discovery via a DNS brute force tool. It includes a TCP port scanner to identify active services and open ports on discovered subdomains, facilitating attack surface mapping.

The tool can be used as a standalone utility or as a Python security library, exposing its core logic as a module for integration into custom automation scripts. Discovered network identifiers can be persisted to text files for external analysis.

Features

Subdomain Enumeration Tools - Discovers all possible subdomains for a target domain by querying search engines and public intelligence sources.

Passive Reconnaissance - Provides a comprehensive framework for gathering subdomains through multi-source API aggregation and search engine queries.

Reconnaissance Frameworks - Provides a framework for gathering target information from external sources without interacting directly with the server.

Multi-Source Data Aggregation - Collects subdomain data by aggregating results from multiple search engines and public intelligence sources.

Attack Surface Mapping - Identifies accessible services and open ports across a network of subdomains to map the attack surface.

Information Gathering Tools - Collects public domain information to map a target's digital footprint for reconnaissance.

Penetration Testing Suites - Facilitates security assessments by gathering target infrastructure data and discovering hidden hostnames.

Hostname Brute Forcing - Uses concurrent request threads to rapidly test wordlists of potential hostnames against a target domain.

Python Library Integrations - Provides a programmatic Python interface for integrating subdomain enumeration into custom automation scripts.

TCP Port Scanners - Identifies active services by attempting direct TCP network connections to specific ports on discovered hosts.

DNS Brute Force Tools - Identifies hidden hostnames by testing large lists of potential subdomains against a target.

Python Security Libraries - Provides a programmatic interface for integrating subdomain discovery and enumeration into custom security scripts.

DNS Brute Forcing - Uncovers hidden subdomains by testing large wordlists of potential hostnames against a domain.

Subdomain Brute Forcing - Discovers hidden subdomains by testing a wordlist of potential hostnames using threaded requests.

Modular Scriptable Interfaces - Exposes core enumeration logic as a Python module for integration into larger automation workflows.

Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.

Subdomain Enumeration - Fast subdomain enumeration for penetration testers.

DNS Security - Fast subdomain enumeration tool for penetration testing.

Domain Enumeration - Subdomain enumeration tool aggregating multiple passive sources.

Network Reconnaissance - Enumerates subdomains using various open-source intelligence sources.

Subdomain Enumeration - Fast subdomain enumeration tool for penetration testers.

Vulnerability Scanning - Fast subdomain enumeration for penetration testers.

aboul3laSublist3r

Features

Star history