Findomain
Fastest subdomain finder using multiple sources
Recon & OSINT5 commands
#subdomain#recon#osint#rust
Installation
1Install Rust/Cargo or download prebuilt binary
2Run the install command
3Verify installation
# Using Cargo
cargo install findomain
# Or download from GitHub releases
# https://github.com/Findomain/Findomain/releases
# Verify
findomain --versionBasic Usage
Findomain queries multiple sources (crt.sh, Virustotal, SecurityTrails, etc.) for subdomain discovery
# Basic scan
findomain -t example.com
# Output to file
findomain -t example.com -o results.txt
# Multiple targets
findomain -f domains.txt -o results.txt
# Resolve found subdomains
findomain -t example.com --resolvedCommand Reference
5 commands
1Target domain to enumerate
-t2File containing list of domains
-f3Output file path
-o4Resolve subdomains and show IPs
--resolved5Quiet mode
-qWhen to Use
1
Need fast subdomain results2
Rust-based performance is desired3
Quick passive recon on multiple targets4
Automated pipeline subdomain discoveryNotes & Tips
1
One of the fastest subdomain tools available2
Supports custom resolvers via config file3
Rate limiting built-in for API sources4
Can export results in JSON, CSV, or TXTCommon Errors & Solutions
Rust/Cargo not installed
Install Rust from https://rustup.rs/ or use prebuilt binaries from releases
API rate limits hit
Create a config file with API keys for higher rate limits