Releases: RevoltSecurities/Subdominator
v3.0.1
v3.0.1 — Patch Release
Release date: 2026-05-30
Bug Fix: Automatic v2 → v3 Config Migration
Users upgrading from Subdominator v2 to v3 encountered an immediate crash on every run when a v2-generated provider-config.yaml was present on disk:
yaml.scanner.ScannerError: mapping values are not allowed here
in "<unicode string>", line 3, column 8:
bevigil: []
Root cause: The v2 config writer emitted arpsyndicate:[] (no space between colon and []) as the first line. YAML treats this as a plain scalar rather than a mapping key, breaking the document structure for every line that follows. v3's config loader had no error handling around yaml.safe_load(), so the exception crashed the tool entirely.
Fix: v3.0.1 detects the malformed file automatically and migrates it in-place:
- All API keys you had configured in v2 are preserved
- Placeholder values (
#YOUR_API_KEY) are filtered out - The file is rewritten in valid v3 YAML format immediately
- A single notice is printed so you know the migration occurred
- No manual steps required — just run
subdominatoras normal
Both v2 config formats are handled: the flat format (arpsyndicate:[]) used by v2.1.x and the older nested format (Bevigil:\n api_key: value) used by very early v2 releases.
Workaround for v3.0.0 (no longer needed): Delete
~/.config/Subdominator/provider-config.yamland let Subdominator regenerate it, then re-enter your keys.
v3.0.0
v3.0.0 — The Precision Discovery Release
Release date: 2026-05-17
Subdominator v3.0.0 is a complete ground-up rewrite. Every subsystem has been replaced or significantly hardened — from the async enumeration engine to the HTTP client, storage layer, CI/CD pipelines, and developer tooling. This release is focused on correctness, stability at scale, and a professional operator experience.
New Features
Interactive Audit Shell
A full terminal interface for managing historical reconnaissance data without leaving the CLI. Launch with --shell / -sh.
| Command | Action |
|---|---|
domains |
List all stored root domains with finding counts |
domain <root> |
Stats summary for a stored domain |
findings <root> |
Show all stored subdomains for a domain |
add <root> <file> |
Import and merge findings from a text file |
export <root> <path> [txt|json|html] |
Export findings to a file |
delete <root> |
Remove a domain and all its findings |
resources |
List resource catalog with auth requirements |
update / release |
In-shell update and release notes |
Disk-Backed Findings Cache
High-volume enumeration runs (100K+ subdomains) no longer spike RAM. An AsyncDiskCache serialises the live deduplication set to disk during the run, keeping memory usage flat regardless of scale.
Recursive Subdomain Enumeration
--recursive-depth / -rd automatically feeds every newly discovered subdomain back through the full resource pipeline to any configured depth, uncovering hidden nested assets other tools miss.
Diagnostic Health Engine
--health-check / -hc verifies internet connectivity and API key status before committing to a long scan. Instantly surfaces misconfigured keys or network issues.
JSON Summary Report (--report-json / -rj)
Structured JSON output covering every resource execution: findings count, duration, errors, and run metadata — ready to pipe into dashboards or downstream automation.
Per-Resource Stats (--show-resource-stats / -srs)
Detailed table showing individual resource finding counts, total duration, and failure counts after a run. Combine with --show-summary for full run telemetry.
HTML Reports (--html / -oh)
Standalone HTML evidence reports rendered with Jinja2. Install the optional extra: pip install "subdominator[reports]".
Global Container Registry
Official Docker images published to GHCR on every release:
docker run --rm -it ghcr.io/revoltsecurities/subdominator:latest -d example.comCustom Database Path (--db-path / -dp)
Write the SQLite findings database to any path. Use --no-db / -nd to skip persistence entirely for a run.
Providers
73 passive OSINT sources are integrated and verified for this release. New providers added in v3.0.0:
- WhoisFreaks — paginated subdomain API with active status filtering
- Windvane — paginated POST-based subdomain lookup
- ArgosDNS — paginated bearer-auth API with
has_morecursor pagination - DigitalYama — lightweight API key provider
- DomScan — subdomain API integration
- RSECloud — paginated POST API with total-pages tracking
- Reconeer — optional-key provider with enhanced results when authenticated
- SubMD — optional-key provider with Bearer auth upgrade path
- Cyfare — POST-based enumeration endpoint
Default-disabled sources (use --all or -ir to include):
commoncrawl, github, virustotal, waybackarchive
Bug Fixes
Critical: Data loss in concurrent enumeration (enumerator.py)
The result-processing block was outside the for task in done_tasks loop. When multiple resources completed simultaneously, only the last task's findings were processed — all others were silently discarded. Fixed by correctly indenting the processing block inside the loop.
Critical: SSL/Proxy not propagated to all HTTP surfaces
Four separate gaps where --insecure and --proxy (and their env var equivalents) were silently ignored:
app.py—ssl_verify=not args.insecurehard-codedTrueat construction time, overridingSUBDOMINATOR_SSL_VERIFYenv var. Fixed:False if args.insecure else defaults.ssl_verify.app.py—proxy=args.proxypassedNoneexplicitly when the flag was absent, overridingSUBDOMINATOR_PROXYenv var. Fixed:args.proxy or defaults.proxy.crtsh.py—asyncpg.connect()had nossl=parameter, causingSSL: CERTIFICATE_VERIFY_FAILEDin certificate-inspection environments. Fixed:ssl=False(crt.sh port 5432 is plain TCP, no SSL needed).github.py— Direct_session.request()call did not forwardproxy=self.client.proxy, silently bypassing--proxyfor GitHub code-search API calls. Fixed.
BrokenPipeError crash on piped output (app.py)
Routing output through revoltlogger / colorama caused an unhandled BrokenPipeError when piping to tools like head or grep. Rewritten to write directly to sys.stdout with a BrokenPipeError guard.
AttributeError crash in Windvane provider (windvane.py)
Provider called self.client.post_json() which does not exist on RetryableHttpClient. Fixed to use the correct self.client.request_json("POST", ...) with json_body= kwarg.
NameError crash in ThreatBook provider (threatbook.py)
A previous partial fix removed import logging and logger = logging.getLogger(...) but left a bare logger.debug(...) call at line 33. Any API response with a non-zero response_code triggered a NameError crash. Fixed to use self.client.logger.debug(...).
Robtex contradictory config flags (robtex.py)
has_optional_config = True and requires_config = False were set but the provider always returned empty results without a key. Corrected to requires_config = True.
Stray stdlib logging in three providers
urlscan.py, threatbook.py, and threatminer.py imported and used Python's stdlib logging.getLogger() instead of the project's revoltlogger. All replaced with self.client.logger.debug(...).
Broken PyPI release workflow (.github/workflows/python-publish.yml)
Workflow called python3 setup.py sdist bdist_wheel — no setup.py exists (hatchling build backend). Completely rewritten to use uv build && uv publish.
Wrong Docker Buildx action (.github/workflows/docker-publish.yml)
actions/setup-buildx-action@v3 does not exist. Fixed to docker/setup-buildx-action@v3.
Test suite hard-failure (pyproject.toml, tests/test_shell.py)
All 7 test files failed with ModuleNotFoundError due to missing pythonpath = ["src"] in [tool.pytest.ini_options]. Three shell tests also failed due to a missing gitmanager= kwarg added after the tests were written. Both fixed.
Environment Variable Support
All runtime settings can now be driven by environment variables (prefix: SUBDOMINATOR_):
| Variable | Flag equivalent | Default |
|---|---|---|
SUBDOMINATOR_SSL_VERIFY=false |
--insecure / -k |
true |
SUBDOMINATOR_PROXY=http://host:port |
--proxy / -p |
(none) |
SUBDOMINATOR_TIMEOUT=30 |
--timeout / -t |
20.0 |
SUBDOMINATOR_CONCURRENCY=16 |
--concurrency / -c |
8 |
Standard proxy env vars (HTTP_PROXY, HTTPS_PROXY, NO_PROXY) are also respected automatically. CLI flags always take priority over env vars.
CI/CD & Packaging
- PyPI:
uv build+uv publishon GitHub Release (replaces brokensetup.pywheel) - GHCR Docker:
docker/setup-buildx-action@v3, multi-platform image on GitHub Release - Build backend:
hatchling(nosetup.py) - Package manager:
uvwith lockeduv.lockfor reproducible installs - Python: requires 3.13+
Developer Notes
pytestconfig added:pythonpath = ["src"],asyncio_mode = "strict"- Dev dependency group:
pytest,pytest-asyncio,pytest-anyio - Run tests:
python -m pytest tests/ -v - Build:
uv build
Legacy Versions
v2.1.1 — Stability Patch
- Maintenance: Provider catalog updates and installation reliability fixes.
v2.1.0 — Branding & Docs
- Identity: Refined documentation and visual branding.
v2.0.0 — Feature Expansion
- Growth: Significant provider catalog expansion and initial Docker support.
Powered by RevoltSecurities
V2.1.1
📦 Subdominator v2.1.1 — Patch Release
Pull Request: #36
Resolved Issue: #33
🚀 Enhancements
- Improved Performance:
Internal optimizations have been made to improve Subdominator’s efficiency and responsiveness during large-scale subdomain enumeration and processing.
🐛 Bug Fixes
- Async File Reading Fix:
Fixed a critical bug where the application would crash or throw runtime errors when attempting to read domain files, caused by a missingawaiton the asynchronous reader function.
This issue was tracked in Issue #33 and resolved in PR #36.
Subdominator now reliably reads domain lists without breaking due to unhandled async behavior.
Acknowledgements
Huge thanks to @th3gokul for diagnosing and fixing the domain file reading issue.
Your contribution directly resolved Issue #33 — much appreciated!
V2.1.0
Subdominator V2.1.0 Release Notes
🚀 What's New in Subdominator V2.1.0?
We’re excited to introduce Subdominator V2.1.0, featuring bug fixes, new resource integrations, API reworks, and powerful new functionalities, including resource control improvements and a shell interface for managing the Subdominator database.
🔧 Bug Fixes & Improvements
✅ Fixed Result Extraction Issue in quake Resource
- A bug affecting quake data extraction was identified, leading to incomplete results.
- This issue has been resolved, ensuring more accurate and structured subdomain enumeration.
✅ Deprecated Non-Functional Resources
- The following resources have been removed due to API deprecation and unavailability:
- ❌
passivetotal - ❌
columbusapi
- ❌
🔥 New Resource Integrations
We've added four new resources to enhance subdomain enumeration:
- ✅ odin – A new reconnaissance API providing extensive DNS footprinting.
- ✅ digitalyama – A specialized source for tracking hidden subdomains.
- ✅ threatcrowd – An open-source threat intelligence platform for passive DNS data.
- ✅ hudsonrock – A threat intelligence service providing deep reconnaissance insights.
These integrations expand Subdominator's capabilities, offering broader subdomain coverage across multiple intelligence sources.
🔄 API Reworks & Migrations
We've restructured and optimized multiple existing APIs to improve performance and reliability:
- 🔄
merklemap,dnsrepo, andsubdomaincenterare now part ofarpsyndicate. - This unifies API management and enhances data accuracy, reducing redundancy and improving request efficiency.
⚙️ New Features
🚀 Advanced Resource Control
- Introduced new resource control features, allowing users to selectively enable or disable specific sources dynamically.
- This improves efficiency, reducing unnecessary queries and optimizing API usage.
💻 Shell Interface for Subdominator DB
- Added a shell-based interface to interact with Subdominator's database.
- Users can now view, manage, and manipulate collected data directly from the command line, making post-processing more convenient.
🚀 Google Dork-Based Subdomain Enumeration
- Introduced a Google Dorking method for discovering subdomains.
- This feature utilizes advanced search queries to extract indexed subdomains from Google search results.
- Helps in bypassing rate limits of passive sources and discovering hidden assets that might not be available via traditional APIs.
📌 Final Thoughts
With these updates, Subdominator V2.1.0 offers:
✔ More accurate subdomain enumeration
✔ A more reliable and streamlined API setup
✔ Greater flexibility in resource control
✔ A powerful shell interface for enhanced data management
Upgrade now and explore the latest improvements! 🚀
V2.0.0
Subdominator V2.0.0 Updates
What's New?
We introduce Subdominator V2.0.0, featuring additional minor updates, bug fixes, and significant changes in the rsecloud resource handling and dnsdumpster API key configuration.
Bug Fixes & Enhancements:
Resolved Performance Issue in rsecloud Resource:
- A critical performance bug was identified in Subdominator where, upon reaching 100% of the API usage limit for
rsecloud, the tool sent infinite requests due to an unhandled response. This caused severe performance degradation. - This issue was verified during internal testing and also reported as Issue #20.
- Subdominator V2.0.0 addresses this problem by introducing proper response handling, preventing unnecessary request loops.
dnsdumpster Configuration Changes:
Setting up dnsdumpster with its API keys has been simplified in this release. Follow these steps to configure it seamlessly:
-
Visit the dnsdumpster website and register a new account.
-
After registering, navigate to your account dashboard to find your API key under the My Account section.
-
Copy your API key(s) and paste them into the YAML configuration file as shown below:
dnsdumpster: - z4gi42ifs9asdjbopakwbhorhao0du42po92jkbnkjbsdug082sjbkdhohabdaoiuboadhg - jdbsaoug0242kjblas42po92jkbnkjbsdug082sjbkdhohabadsjbudaugiuga98t24vi2u
-
Once updated, Subdominator will run smoothly without any exceptions related to
dnsdumpsterAPI configurations.
With these updates, Subdominator V2.0.0 ensures better performance, reliability, and ease of use.
V1.0.9
Subdominator - Unleash the Power of Subdomain Enumeration
Subdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.
Features:
- fast and powerfull to enumerate subdomains.
- 50+ passive results to enumerate subdomains.
- configurable API keys setup
- Integrated notification system
Info:
We request existing user to update their config yaml file with new resources by opening the config file in : bash $HOME/.config/Subdominator/provider-config.yaml and add the below resources:
builwith:
- your-api-key1
- your-api-key2
passivetotal:
- user-mail1:api-key1
- user-mail2:api-key2
trickest:
- your-api-key1
- your-api-key2by these your config yaml file will get updated or else check your yaml file that matches the below mentioned resources with *, The new users will required to update in next version if any new resources added
in Subdominator.
Usage:
subdominator -h
| | _) |
__| | | __ \ _` | _ \ __ `__ \ | __ \ _` | __| _ \ __|
\__ \ | | | | ( | ( | | | | | | | ( | | ( | |
____/ \__,_| _.__/ \__,_| \___/ _| _| _| _| _| _| \__,_| \__| \___/ _|
@RevoltSecurities
[DESCRIPTION]: Subdominator a passive subdomain enumeration that discovers subdomains for your targets using with passive and open source resources
[USAGE]:
subdominator [flags]
[FLAGS]:
[INPUT]:
-d, --domain : domain name to enumerate subdomains.
-dL, --domain-list : filename that contains domains for subdomain enumeration.
stdin/stdout : subdominator now supports stdin/stdout
[OUTPUT]:
-o, --output : filename to save the outputs.
-oD, --output-directory : directory name to save the outputs (use it when -dL is flag used).
-oJ, --output-json : filename to save output in json fromat
[OPTIMIZATION]:
-t, --timeout : timeout value for every sources requests.
[UPDATE]:
-up, --update : update subdominator for latest version but yaml source update required manual to not affect your api keys configurations.
-duc, --disable-update-check : disable automatic update check for subdominator
-sup, --show-updates : shows latest version updates of subdominator
[CONFIG]:
-nt, --notify : send notification of found subdomain using source Slack, Pushbullet, Telegram, Discord
-p, --proxy : http proxy to use with subdominator (intended for debugging the performance of subdominator).
-cp, --config-path : custom path of config file for subdominator to read api keys ( default path: /home/sanjai/.config/Subdominator/provider-config.yaml)
-fw, --filter-wildcards : filter the found subdomains with wildcards and give cleaned output
[DEBUG]:
-h, --help : displays this help message and exits
-s, --silent : show only subdomain in output (this is not included for -ski,-sti)
-v, --version : show current version of subdominator and latest version if available and exits
-ski, --show-key-info : show keys error for out of credits and key not provided for particular sources
-ste, --show-timeout-info : show timeout error for sources that are timeout to connect
-nc, --no-color : disable the colorised output of subdominator
-ls, --list-source : display the sources of subdominator uses for subdomain enumerations and exits (included for upcoming updates on sources).
Subdominator Integrations:
Subdominator integrates with various free and Paid API passive sources to gather valuable subdomain information. We would like to give credit to the following websites for providing free-to-obtain API keys for subdomain enumeration.
Claim your free API and Paid keys here:
Subdomains Resources:
- VirusTotal*: VirusTotal
- Chaos*: Chaos
- Dnsdumpter*: Dnsdumpster
- Whoisxml*: WhoisXML
- SecurityTrails*: SecurityTrails
- Bevigil*: Bevigil
- Binaryedge*: BinaryEdge
- Fullhunt*: Fullhunt
- Rapidapi*: RapidAPI (requires: Rapid api key)
- Bufferover*: Bufferover
- Certspotter*: Certspotter
- Censys*: Censys
- Fullhunt*: Fullhunt
- Zoomeye*: Zoomeye
- Netlas*: Netlas
- Leakix*: Leakix
- Redhunt*: Redhunt
- Shodan* : Shodan
- Huntermap* : Hunter
- Google*: Google
- Facebook*: Facebook
- Quake*: Quake
- RapidFinder*: RapidFinder (requires: Rapid api key)
- RapidScan*: RapidScan (requires: Rapid api key)
- Fofa*: Fofa
- CodeRog*: CodeRog (requires: Rapid api key)
- C99*: C99
- RSECloud*: RSECloud
- Intelx*: Intelx
- Builtwith*:Builtwith
- Passivetotal*:PassiveTotal
- Trickest*:Trickest
Notification Resources:
- Slack: Slack
- Pushbullet: Pushbullet
Installation:
**Subdominator requires python latest version to be installed and with latest version pip commandline tool
pip install git+https://github.com/RevoltSecurities/Subdominator
and if any error occured with httpx package please use this command to install the tool:
pip install git+https://github.com/RevoltSecurities/Subdominator --no-deps==0.25.2you can also install the tool using pipx and install the latest version by using this command:
pipx install git+https://github.com/RevoltSecurities/Subdominatorv1.0.8
Subdominator - Unleash the Power of Subdomain Enumeration
Subdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.
Features:
- fast and powerfull to enumerate subdomains.
- 45+ passive results to enumerate subdomains.
- configurable API keys setup
- Integrated notification system
Usage:
subdominator -h
__ __ _ __
_____ __ __ / /_ ____/ / ____ ____ ___ (_) ____ ____ _ / /_ ____ _____
/ ___/ / / / / / __ \ / __ / / __ \ / __ `__ \ / / / __ \ / __ `/ / __/ / __ \ / ___/
(__ ) / /_/ / / /_/ // /_/ / / /_/ / / / / / / / / / / / / // /_/ / / /_ / /_/ / / /
/____/ \__,_/ /_.___/ \__,_/ \____/ /_/ /_/ /_/ /_/ /_/ /_/ \__,_/ \__/ \____/ /_/
@RevoltSecurities
[DESCRIPTION]: Subdominator a passive subdomain enumeration that discovers subdomains for your targets using with passive and open source resources
[USAGE]:
subdominator [flags]
[FLAGS]:
[INPUT]:
-d, --domain : domain name to enumerate subdomains.
-dL, --domain-list : filename that contains domains for subdomain enumeration.
stdout : subdominator supports stdout to pipe its output
[OUTPUT]:
-o, --output : filename to save the outputs.
-oD, --output-directory : directory name to save the outputs (use it when -dL is flag used).
[OPTIMIZATION]:
-t, --timeout : timeout value for every sources requests.
[Update]:
-up, --update : update subdominator for latest version but yaml source update required manual to not affect your api keys configurations.
-duc, --disable-update-check : disable automatic update check for subdominator
-sup, --show-updates : shows latest version updates of subdominator
[CONFIG]:
-nt, --notify : send notification of found subdomain using source Slack, Pushbullet, Telegram, Discord
-p, --proxy : http proxy to use with subdominator (intended for debugging the performance of subdominator).
-cp, --config-path : custom path of config file for subdominator to read api keys ( default path: /home/sanjai/.config/Subdominator/provider-config.yaml)
[DEBUG]:
-h, --help : displays this help message and exits
-v, --version : show current version of subdominator and latest version if available and exits
-ske, --show-key-error : show keys error for out of credits and key not provided for particular sources
-sre, --show-timeout-error : show timeout error for sources that are timeout to connect
-nc, --no-color : disable the colorised output of subdominator
-ls, --list-source : display the sources of subdominator uses for subdomain enumerations and exits (included for upcoming updates on sources).
Subdominator Integrations:
Subdominator integrates with various free and Paid API passive sources to gather valuable subdomain information. We would like to give credit to the following websites for providing free-to-obtain API keys for subdomain enumeration.
Claim your free API and Paid keys here:
Subdomains Resources:
- VirusTotal: VirusTotal
- Chaos: Chaos
- Dnsdumpter: Dnsdumpster
- Whoisxml: WhoisXML
- SecurityTrails: SecurityTrails
- Bevigil: Bevigil
- Binaryedge: BinaryEdge
- Fullhunt: Fullhunt
- Rapidapi: RapidAPI
- Bufferover: Bufferover
- Certspotter: Certspotter
- Censys: Censys
- Fullhunt: Fullhunt
- Zoomeye: Zoomeye
- Netlas: Netlas
- Leakix: Leakix
- Redhunt: Redhunt
- Shodan : Shodan
- Huntermap : Hunter
- Google: Google
- Facebook: Facebook
- Quake: Quake
- RapidFinder: RapidFinder
- RapidScan: RapidScan
- Fofa: Fofa
- CodeRog: CodeRog
- C99: C99
- RSECloud: RSECloud
- Myssl: Myssl
- Racent: Racent
Notification Resources:
- Slack: Slack
- Pushbullet: Pushbullet
Installation:
**Subdominator requires python latest version to be installed and with latest version pip commandline tool
pip install git+https://github.com/RevoltSecurities/Subdominator
V1.0.7
Subdominator - Unleash the Power of Subdomain Enumeration
Subdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.
Features:
- fast and powerfull to enumerate subdomains.
- 35+ passive results to enumerate subdomains.
- configurable API keys setup
- Integrated notification system
Usage:
subdominator -h
__ __ _ __
_____ __ __ / /_ ____/ / ____ ____ ___ (_) ____ ____ _ / /_ ____ _____
/ ___/ / / / / / __ \ / __ / / __ \ / __ `__ \ / / / __ \ / __ `/ / __/ / __ \ / ___/
(__ ) / /_/ / / /_/ // /_/ / / /_/ / / / / / / / / / / / / // /_/ / / /_ / /_/ / / /
/____/ \__,_/ /_.___/ \__,_/ \____/ /_/ /_/ /_/ /_/ /_/ /_/ \__,_/ \__/ \____/ /_/
@RevoltSecurities
[DESCRIPTION]: Subdominator a passive subdomain enumeration that discovers subdomains for your targets using with passive and open source resources
[USAGE]:
subdominator [flags]
[FLAGS]:
[INPUT]:
-d, --domain : domain name to enumerate subdomains.
-dL, --domain-list : filename that contains domains for subdomain enumeration.
stdout : subdominator supports stdout to pipe its output
[OUTPUT]:
-o, --output : filename to save the outputs.
-oD, --output-directory : directory name to save the outputs (use it when -dL is flag used).
[OPTIMIZATION]:
-t, --timeout : timeout value for every sources requests.
[Update]:
-up, --update : update subdominator for latest version but yaml source update required manual to not affect your api keys configurations.
-duc, --disable-update-check : disable automatic update check for subdominator
-sup, --show-updates : shows latest version updates of subdominator
[CONFIG]:
-nt, --notify : send notification of found subdomain using source Slack, Pushbullet, Telegram, Discord
-p, --proxy : http proxy to use with subdominator (intended for debugging the performance of subdominator).
-cp, --config-path : custom path of config file for subdominator to read api keys ( default path: /home/sanjai/.config/Subdominator/provider-config.yaml)
[DEBUG]:
-h, --help : displays this help message and exits
-v, --version : show current version of subdominator and latest version if available and exits
-ske, --show-key-error : show keys error for out of credits and key not provided for particular sources
-sre, --show-timeout-error : show timeout error for sources that are timeout to connect
-nc, --no-color : disable the colorised output of subdominator
-ls, --list-source : display the sources of subdominator uses for subdomain enumerations and exits (included for upcoming updates on sources).
Subdominator Integrations:
Subdominator integrates with various free API passive sources to gather valuable subdomain information. We would like to give credit to the following websites for providing free-to-obtain API keys for subdomain enumeration.
Claim your free API keys here:
Subdomains Resources:
- VirusTotal: VirusTotal
- Chaos: Chaos
- Dnsdumpter: Dnsdumpster
- Whoisxml: WhoisXML
- SecurityTrails: SecurityTrails
- Bevigil: Bevigil
- Binaryedge: BinaryEdge
- Fullhunt: Fullhunt
- Rapidapi: RapidAPI
- Bufferover: Bufferover
- Certspotter: Certspotter
- Censys: Censys
- Fullhunt: Fullhunt
- Zoomeye: Zoomeye
- Netlas: Netlas
- Leakix: Leakix
- Redhunt: Redhunt
- Shodan : Shodan
- Huntermap : Hunter
- Google: Google
- Facebook: Facebook
- Quake: Quake
- RapidFinder: RapidFinder
- RapidScan: RapidScan
Notification Resources:
- Slack: Slack
- Pushbullet: Pushbullet
Installation:
**Subdominator requires python latest version to be installed and with latest version pip commandline tool
pip install git+https://github.com/RevoltSecurities/Subdominator
v1.0.6
Subdominator New Verision updates:
- New version of subdominator concurrency are improved
- Subdominator notification results are enhanced and improved
- Subdominator OSINT mode will give more and better than previous versions
- Installation errors and Bugs are patched
- Subdominator supports oneliners
Install New version by pip:
pip install git+https://github.com/sanjai-AK47/Subdominator.gitINFO: If you are installing subdominator for first time means install it will config_keys.yaml file by git clone then install with pip
v1.0.5
Subdominator v1.0.5 Release Notes
We are excited to announce the latest release of Subdominator v1.0.5, packed with new features, bug fixes, and improvements. Subdominator is now more powerful, versatile, and easier to use than ever before.
What's New:
-
Shodan and Hunter: Subdominator now supports Shodan and HunterHow API service, expanding the range of tools available for subdomain enumeration and analysis. Harness the power of Redhunt alongside other APIs for comprehensive domain reconnaissance.
-
Increased Concurrency: We've optimized Subdominator for faster subdomain enumeration. With increased concurrency, you can discover subdomains more efficiently, making your penetration testing workflows even smoother.
-
Bug Fixes and Logical Improvements: We've squashed pesky bugs and refined the logic under the hood. Subdominator is now more reliable and accurate, ensuring you get the results you need.
-
Improved Recursion for Unique Wildcards: Subdominator's recursion algorithm for unique wildcards has been enhanced. Discover even more hidden subdomains with our improved recursive scanning.
-
Python Package: Subdominator is now available as a Python package! Installing and upgrading Subdominator is a breeze on any operating system. Run Subdominator anywhere, anytime, without hassle.
About the Author:
Hi Im D.Sanjai Kumar the developer for Subdominator and Im a web pentester and an API penetration tester and open source tool developer
if you have any issues related to subdominator please submit an issues. Thank you!
Getting Started:
To get started with Subdominator v1.0.4, simply visit the official GitHub repository: Subdominator GitHub Repo
How to Install:
Method 1
pip install subdominator
subdominator -hcopy the configuration yaml file from github if you are new user to subdominator
Dont worry if any installation failed and there is another method is there for you guys or you run the subdominator script as previous version!
git clone https://github.com/sanjai-AK47/Subdominator.git
pip install .
subdominator -hAfter a successfull installtions configure your yaml file you can simply see here how to
add new integration in the config_keys.yaml with my Instructions and some changes also done is services like Censys,Zoomeye-auth,Dnsdumpster and etc.. which breaks the limitations of api keys of Subdominator which makes it better than previous versions
Thank you for using Subdominator, and happy hacking! 🚀


