Subfinder
Information Gatheringkali · parrotPassive subdomain discovery tool. Fast and reliable for bug bounty recon.
Install
sudo apt install subfinder
Common commands
subfinder -d target.com -o subs.txt subfinder -dL domains.txt -all
Use only on systems you are authorized to test. Follow program scope.
Related tools
Amass
featuredOWASP Amass for in-depth subdomain enumeration and attack surface mapping.
AnonSurf
featuredParrot OS anonymity suite that routes traffic through Tor with one command.
Nmap
featuredIndustry-standard network scanner for port discovery, service detection, and OS fingerprinting. Core recon tool for every engagement.
Maltego
Graph-based OSINT and link analysis for mapping people, domains, and infrastructure relationships.