Linux command
findomain 命令
文件
复制后可按需替换文件名、目录或参数。
常用示例
Find subdomains
findomain -t [example.com]
Output to file
findomain -t [example.com] -o
Use all sources
findomain -t [example.com] -a
Check for live subdomains
findomain -t [example.com] --resolved
Output in JSON
findomain -t [example.com] --json
Read domains from file
findomain -f [domains.txt]
说明
findomain is a cross-platform subdomain enumerator. It queries multiple data sources to discover subdomains for a target domain, useful for reconnaissance in security assessments. The tool aggregates results from certificate transparency logs, search engines, and other passive sources without making direct requests to the target.
参数
- -t _domain_
- Target domain.
- -f _file_
- Read domains from file.
- -o
- Output to file.
- -a, --all-apis
- Use all available APIs.
- --resolved
- Show only resolving subdomains.
- --ip
- Show IP addresses.
- --json
- Output in JSON format.
- -q, --quiet
- Suppress informational output.
- -u, --unique
- Remove duplicates.
FAQ
What is the findomain command used for?
findomain is a cross-platform subdomain enumerator. It queries multiple data sources to discover subdomains for a target domain, useful for reconnaissance in security assessments. The tool aggregates results from certificate transparency logs, search engines, and other passive sources without making direct requests to the target.
How do I run a basic findomain example?
Run `findomain -t [example.com]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -t _domain_ do in findomain?
Target domain.