Sublist3r
Fast subdomain enumeration using search engines
Recon & OSINT6 commands
#subdomain#recon#osint#python
Installation
1Clone the repository
2Navigate into the directory
3Install Python dependencies
4Verify installation
git clone https://github.com/aboul3la/Sublist3r.git
cd Sublist3r
pip install -r requirements.txt
# Verify
python sublist3r.py -hBasic Usage
Sublist3r uses search engines (Google, Bing, Yahoo, Baidu, etc.) and other sources to find subdomains
# Basic scan
python sublist3r.py -d example.com
# Save results
python sublist3r.py -d example.com -o results.txt
# Enable brute force
python sublist3r.py -d example.com -b
# Quiet mode
python sublist3r.py -d example.com -vCommand Reference
6 commands
1Target domain
-d2Enable brute force mode
-b3Ports to scan on found subdomains
-p4Verbose mode
-v5Output file path
-o6Number of threads
-tWhen to Use
1
Quick passive subdomain enumeration2
When search engine scraping is preferred3
Lightweight alternative to amass4
Initial recon before deeper scanningNotes & Tips
1
Uses Google, Bing, Yahoo, Baidu, Ask, Netcraft, DNSDumpster, Virustotal2
Brute force mode uses a built-in wordlist3
Python 3 required4
Search engines may rate-limit aggressive requestsCommon Errors & Solutions
ModuleNotFoundError for requests/dnspython
Run pip install -r requirements.txt in the Sublist3r directory
Captcha or rate limit from search engines
Reduce thread count with -t, or add delays between runs