SUBLIST3R(1)

📦 version 1.1, in debian bookworm, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 SUBLIST3R(1) 💖

okay bestie, so you know that moment when you're doing recon and you're like "what subdomains does this domain even have" — yeah, that's what sublist3r(1) is for. It's a tool designed to enumerate subdomains of websites using OSINT. Let's get into it. 🦋

✨ SYNOPSIS ✨

sublist3r [ARGS] ...

🌸 DESCRIPTION 🌸

This package contains a Python security tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting over the network. periodt. 💅

Sublist3r enumerates subdomains using many search engines, specifically Google, Yahoo, Bing, Baidu, and Ask. And that's not even the whole menu, bestie — Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster, and ReverseDNS. It's giving sources everywhere, and honestly? obsessed. 😭

Subbrute was integrated with Sublist3r to increase the possibility of finding more subdomains using bruteforce with an improved wordlist. Lowkey iconic of them. 🔥

👑 OPTIONS 👑

  • -h, --help — Show this help message and exit. The classic "wait what were the flags again" move, no shade, we all do it. 💖
  • -d DOMAIN, --domain DOMAIN — Domain name to enumerate it's subdomains. Yes, that apostrophe is staying exactly as it is, bestie — copy the tool, not the grammar. 🙈
  • -b [BRUTEFORCE], --bruteforce [BRUTEFORCE] — Enable the subbrute bruteforce module. Turning this on means going harder and brute-forcing, not just vibing with OSINT. ✨
  • -p PORTS, --ports PORTS — Scan the found subdomains against specified TCP ports. Like, you found them, now go knock on the doors. 🚪
  • -v [VERBOSE], --verbose [VERBOSE] — Enable verbosity and display results in realtime. Main character energy: you get to watch the findings roll in live instead of waiting in silence. 💀
  • -t THREADS, --threads THREADS — Number of threads to use for subbrute bruteforce. More threads = more multitasking = she's doing a lot. 🧚
  • -e ENGINES, --engines ENGINES — Specify a comma-separated list of search engines. Pick your faves, comma, comma, comma. 🎀
  • -o OUTPUT, --output OUTPUT — Save the results to text file. Receipts!! Keep the receipts!! 🍓
  • -n, --no-color — Output without color. For when you're piping things around or just want it plain, and that's valid too. 🌈

💜 EXAMPLES 💜

Look at her go. Every one of these is a whole mood:

sublist3r -d google.com
sublist3r -d example.com -p 80,443
sublist3r -v -d example.com
sublist3r -b -d example.com
sublist3r -e google,yahoo,virustotal -d example.com

🫶 AUTHOR 🫶

Written by Ahmed Aboul-Ela.

This manual page was written by Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> for the Debian project (but may be used by others).

okay and that's the whole page, bestie!! 🥰 this one is sublist3r-1.1, dated 22 Aug 2022, and yeah — su...r(1) in the header and footer because the terminal was being dramatic and truncating. slay, go enumerate some subdomains, and remember: the vibe changes, the facts never do. 💅✨

📦 where this page comes from