Sublist3r

Fast subdomains enumeration tool for penetration testers
Sublist3r logo

Here is the markdown description:

Sublist3r

A Python tool designed for OSINT (Open-Source Intelligence) to enumerate subdomains of websites.


Features

  • Enumerates subdomains using multiple search engines (Google, Yahoo, Bing, Baidu, Ask)
  • Integrates with subbrute for bruteforce module
  • Supports DNS resolution using dnspython
  • Outputs results in real-time or saves to text file

Options and Switches


Short Form Long Form Description
-d --domain Domain name to enumerate subdomains of
-b --bruteforce Enable the subbrute bruteforce module
-p --ports Scan the found subdomains against specific tcp ports
-v --verbose Enable the verbose mode and display results in real-time
-t --threads Number of threads to use for subbrute bruteforce
-e --engines Specify a comma-separated list of search engines
-o --output Save the results to text file
-h --help Show the help message and exit

Examples


  • sublist3r.py -d example.com
  • sublist3r.py -p 80,443 -d example.com
  • sublist3r.py -v -d example.com

Using Sublist3r as a Module in Your Python Scripts


You can use Sublist3r as a module in your own Python scripts. Here's an example:

import sublist3r

subdomains = sublist3r.main(domain, no_threads, savefile, ports=None, silent=False, verbose=False, enable_bruteforce=False, engines=None)

License


Sublist3r is licensed under the GNU GPL license. See LICENSE for more information.


Credits


  • TheRook - Bruteforce module based on his script subbrute
  • Bitquark - Subbrute's wordlist based on his research dnspop

Thanks


Special thanks to Ibrahim Mosaad for his great contributions that helped improve the tool.





> Visit Sublist3r Website <