aboul3la/Sublist3r
Sublist3r
Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by querying search engines and public intelligence sources. It functions as a security tool for identifying the digital footprint of a target domain.
The project provides both passive enumeration through multi-source API aggregation and active discovery via a DNS brute force tool. It includes a TCP port scanner to identify active services and open ports on discovered subdomains, facilitating attack surface mapping.
The tool can be used as a standalone utility or as a Python security library, exposing its core logic as a module for integration into custom automation scripts. Discovered network identifiers can be persisted to text files for external analysis.
Features
- Subdomain Enumeration Tools - Discovers all possible subdomains for a target domain by querying search engines and public intelligence sources.
- Passive Reconnaissance - Provides a comprehensive framework for gathering subdomains through multi-source API aggregation and search engine queries.
- Reconnaissance Frameworks - Provides a framework for gathering target information from external sources without interacting directly with the server.
- Multi-Source Data Aggregation - Collects subdomain data by aggregating results from multiple search engines and public intelligence sources.
- Attack Surface Mapping - Identifies accessible services and open ports across a network of subdomains to map the attack surface.
- Information Gathering Tools - Collects public domain information to map a target's digital footprint for reconnaissance.
- Penetration Testing Suites - Facilitates security assessments by gathering target infrastructure data and discovering hidden hostnames.
- Hostname Brute Forcing - Uses concurrent request threads to rapidly test wordlists of potential hostnames against a target domain.
- Python Library Integrations - Provides a programmatic Python interface for integrating subdomain enumeration into custom automation scripts.
- TCP Port Scanners - Identifies active services by attempting direct TCP network connections to specific ports on discovered hosts.
- DNS Brute Force Tools - Identifies hidden hostnames by testing large lists of potential subdomains against a target.
- Python Security Libraries - Provides a programmatic interface for integrating subdomain discovery and enumeration into custom security scripts.
- DNS Brute Forcing - Uncovers hidden subdomains by testing large wordlists of potential hostnames against a domain.
- Subdomain Brute Forcing - Discovers hidden subdomains by testing a wordlist of potential hostnames using threaded requests.
- Modular Scriptable Interfaces - Exposes core enumeration logic as a Python module for integration into larger automation workflows.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Reconnaissance Tools - Fast tool for subdomain enumeration.
- Subdomain Enumeration - Fast subdomain enumeration for penetration testers.
- Application Security - Fast subdomain enumeration for penetration testing.
- DNS Security - Fast subdomain enumeration tool for penetration testing.
- Domain Enumeration - Subdomain enumeration tool aggregating multiple passive sources.
- Domain Reconnaissance - Enumerates subdomains using various search engines.
- Network Reconnaissance - Enumerates subdomains using various open-source intelligence sources.
- Network Reconnaissance Tools - Tool for fast subdomain enumeration.
- Subdomain Enumeration - Fast subdomain enumeration tool for penetration testers.
- Vulnerability Scanning - Fast subdomain enumeration for penetration testers.
