Edu4rdSHL/findomain
Findomain
Findomain is a subdomain enumeration and infrastructure analysis tool designed for attack surface mapping. It functions as a DNS reconnaissance suite that discovers subdomains using multiple data sources and API keys to identify the full extent of a target network.
The system acts as an attack surface monitor by tracking subdomain changes over time and sending real-time alerts via webhooks when new assets are detected. It includes specialized capabilities for detecting DNS wildcards to filter false positives and resolving subdomain IPs through parallel resolution.
The tool provides a workflow for external reconnaissance, allowing users to import data from other tools and analyze infrastructure through port scanning, HTTP checks, and automated screenshots of discovered hosts.
Features
- Attack Surface Monitors - Acts as an attack surface monitor by tracking subdomain changes and sending real-time alerts via webhooks.
- Subdomain Discoveries - Maps the external attack surface by discovering subdomains using multiple data sources and API keys.
- Change Monitors - Provides a service to track changes in subdomain records over time and send alerts when new assets are detected.
- Attack Surface Mapping - Identifies and lists all subdomains and associated IP addresses to understand the full extent of a target network.
- Differential Asset Tracking - Compares current subdomain lists against historical snapshots to detect and alert on new assets.
- DNS Reconnaissance Frameworks - Provides a comprehensive suite for DNS-based discovery, including IP resolution, wildcard detection, and data consolidation.
- Host Infrastructure Analysis - Analyzes remote hosts using port scanning, HTTP checks, and automated screenshots to identify active services.
- Reconnaissance Workflow Automation - Provides a consolidated workflow for importing discovery data and analyzing the accessibility of external infrastructure.
- Subdomain Enumeration Tools - Discovers and maps an external attack surface by enumerating subdomains using multiple data sources and API keys.
- Subdomain Scanners - Analyzes the status of discovered subdomains through port scanning, HTTP checks, and automated screenshots.
- Subdomain Change Monitors - Tracks changes in subdomain records over time and alerts when new assets are detected.
- Subdomain IP Resolvers - Translates discovered subdomains into IP addresses using parallel resolution and DNS over TLS.
- Subdomain Change Monitors - Tracks subdomains over time and sends alerts when new entries are discovered on a target domain.
- Subdomain Change Monitors - Monitors changes to discovered subdomains and sends real-time alerts via webhooks.
- Vulnerability Discovery Pipelines - Implements a sequential workflow for reconnaissance that uses port scans and HTTP checks to identify potential security weaknesses.
- Web Service Port Scans - Performs port scans on discovered hosts to identify active HTTP services for further analysis.
- Multi-Source Data Aggregation - Combines subdomain discovery results from various third-party APIs and external tools into a unified dataset.
- Domain Structure Analyzers - Analyzes the state of hosts by performing port scans, HTTP checks, and capturing screenshots of the infrastructure.
- Parallel Resolution - Resolves hostnames to IP addresses using concurrent requests and DNS over TLS for high throughput.
- Wildcard Domain Detectors - Analyzes DNS response patterns to identify wildcard records and filter false positives from results.
- Wildcard DNS Filters - Identifies wildcard DNS records to filter out false positives and ensure accurate enumeration results.
- Webhook Notifications - Pushes discovery events through configured HTTP endpoints to send real-time alerts to communication platforms.
- Reconnaissance Tools - High-performance subdomain enumerator.
- Subdomain Enumeration - High-performance subdomain enumeration tool.
- Network Reconnaissance Tools - Fast cross-platform subdomain enumeration tool.
