enumerate_subdomains
Passively discover subdomains of any domain using multiple free OSINT sources in parallel, without sending traffic to the target.
Instructions
Passively enumerate subdomains of a domain via free OSINT sources.
Queries certificate transparency (crt.sh), HackerTarget, AnubisDB and
AlienVault OTX in parallel and merges the results. Passive — no packets are
sent to the target itself. sources optionally restricts which providers
to use (see server_status / available list: crtsh, hackertarget, anubis, otx).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| sources | No |