All apps/Subfinder

Subfinder

subfinder

A passive subdomain discovery tool that discovers valid subdomains for websites.

Runs as subfinder|macOS, Linux, Windows|docs.projectdiscovery.io

Command form

ai-draft · 2 tasks · 11 fields

Passive subdomain discovery for one or more domains. Provider config, filters, resolvers and update flags are left out.

Opens the form; the finished command lands at your prompt, unrun
otty gui subfinder
Enumerate subdomainsExample values, fixed in this page — nothing here reaches a terminal
Basic
Domain*
string
Only print subdomains
-silent
Output file
file
TasksEach one presets the form for one job
Find subdomains of a domain
domainsilentoutput
Find subdomains for a list
listsilentoutput
ParametersOnly these flags are editable in the form
Domain
Domain to find subdomains for (comma-separated for several).
string
-d-domain
Domain list file
path
-dL-list
Sources
Comma-separated sources, e.g. crtsh,github.
string
-s-sources
Use all sources (slow)
boolean
-all
Recursive-capable sources only
boolean
-recursive
Active subdomains only
boolean
-nW-active
Only print subdomains
boolean
-silent
JSON lines output
boolean
-oJ-json
Output file
path
-o-output
Max requests per second
integer
-rl-rate-limit
Timeout (seconds)
integer
-timeout
SourcesEvery flag above is checked against these
s
-d, -domain string[] domains to find subdomains for -dL, -list string file containing list of domains for subdomain discovery -s, -sources string[] specific sources to use for discovery (-s crtsh,github). Use -ls to display all available sources. -recursive use only sources that can handle subdomains recursively (e.g. subd…
help2026-10-27

github.com

Before it fills your prompt, Otty checks the installed subfinder against its version. A form that does not match your version is not offered.