← Back to search

Subdomain Discovery with Sublist3r

recontool

Summary

Passively enumerates subdomains for a domain using public search engines and OSINT sources.

Walkthrough

Use sublist3r for passive subdomain enumeration of a target domain through search engines and OSINT sources.

Steps

  • Pass the target domain with -d.
  • Optionally restrict the OSINT sources with -e (e.g. google,yahoo).

Commands

bash

sublist3r -d <TARGET> -e google,yahoo