sigsubfind3r

README

sigsubfind3r

sigsubfind3r is a passive subdomain discovery tool - it gathers a list of subdomains passively using a curated list of passive online sources.

Usage

To display help message for sigsubfind3r use the -h flag:

sigsubfind3r -h

     _                 _      __ _           _ _____
 ___(_) __ _ ___ _   _| |__  / _(_)_ __   __| |___ / _ __
/ __| |/ _` / __| | | | '_ \| |_| | '_ \ / _` | |_ \| '__|
\__ \ | (_| \__ \ |_| | |_) |  _| | | | | (_| |___) | |
|___/_|\__, |___/\__,_|_.__/|_| |_|_| |_|\__,_|____/|_| v1.4.0
       |___/

USAGE:
  sigsubfind3r [OPTIONS]

OPTIONS:
  -d,  --domain            domain to find subdomains for
  -eS, --exclude-sources   comma(,) separated list of sources to exclude
  -lS, --list-sources      list all the sources available
  -nC, --no-color          no color mode: Don't use colors in output
  -s,  --silent            silent mode: Output subdomains only
  -uS, --use-sources       comma(,) separated list of sources to use

DESCLAIMER: wayback and github sources are a bit slow.

Installation

From Binary

You can download the pre-built binary for your platform from this repository's releases page, extract, then move it to your $PATHand you're ready to go.

From Source

sigsubfind3r requires go1.17+ to install successfully. Run the following command to get the repo:-

go install -v github.com/signedsecurity/sigsubfind3r/cmd/sigsubfind3r@latest

From Github

git clone https://github.com/signedsecurity/sigsubfind3r.git && \
cd sigsubfind3r/cmd/sigsubfind3r/ && \
go build . && \
mv sigsubfind3r /usr/local/bin/ && \
sigsubfind3r -h

Post Installation

sigsubfind3r will work after installation. However, to configure sigsubfind3r to work with certain services you will need to have setup API keys. Currently these services include:

• chaos
• github
• intelx

The API keys are stored in the $HOME/.config/sigsubfind3r/conf.yaml file - created upon first run - and uses the YAML format. Multiple API keys can be specified for each of these services.

Example:

version: 1.4.0
sources:
    - alienvault
    - anubis
    - archiveis
    - bufferover
    - cebaidu
    - certspotterv0
    - chaos
    - crtsh
    - github
    - hackertarget
    - intelx
    - rapiddns
    - riddler
    - sonar
    - sublist3r
    - threatcrowd
    - threatminer
    - urlscan
    - wayback
    - ximcx
keys:
    chaos:
        - d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39asdsd54bbc1aabb208c9acfb
    github:
        - d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39
        - asdsd54bbc1aabb208c9acfbd2dd41ce7fc9db39
    intelx:
        - 2.intelx.io:00000000-0000-0000-0000-000000000000

Contribution

Issues and Pull Requests are welcome!