Sublister - Subdomains Enumerator

Sublist3r is a Python-based tool that is used to enumerate the subdomains of a website. It helps penetration testers and bug hunters to find various subdomains for which they can find vulnerabilities. Sublist3r searches various subdomains using Google, Yahoo, Bing, Baidu, and Ask. It also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster, and ReverseDNS. 

The Repository is available on GitHub -

  •  Clone the repository in Linux using the git command. 
Cloning the repository
  • Re-direct into the folder which was just created. It will have files as shown below.
Files in Sublist3r
  • Before running the tool we need to install all the python modules required by the tool. To do that, run command - pip install -r requirements.txt
Install packages
  • Once the installation is finished. You can run the tool using python. Command - python3
Run Sublist3r
It shows you need to run the command with the -d option and a domain name or else use the help command.
  • For example, if you want to look for a subdomain for The command is - python3 -d
Finding Subdomains for
The tool is able to find various subdomains of, using this, pen-testers and bug hunters can find vulnerabilities under a subdomain.
  • Also, some other flags like -d are worth mentioning from the help command. To see other flags type - python3 -h.
Help option
  • -t: command can be used to start a number of threads to make the process faster, python3 -d -t 50 ( means send 50 requests at a time)
  • -o: command can be used to save the output given by Sublist3r in a text file, python3 -d -o output.txt, here output.txt is a file where the output will save.

We hope this helps. If any suggestions or doubts you can add a comment and we will reply as soon as possible.

No comments:

Post a Comment