当前位置：首页 > news >正文

Subdominator：一款针对漏洞奖励计划的子域名安全枚举工具

news 2026/2/8 2:25:34

关于Subdominator

Subdominator是一款针对漏洞奖励计划的子域名安全枚举工具，可用于在漏洞搜寻和侦察过程中进行被动子域名枚举。它旨在通过高效枚举子域名和各种免费被动资源来帮助研究人员和网络安全专业人员发现潜在的安全漏洞。

Subdominator 与各种免费和付费 API 被动源集成，以收集有价值的子域信息。

功能介绍

1、能够快速、强大地子域名枚举能力；

2、45+ 被动结果枚举子域；

3、可配置 API 密钥设置；

4、综合通知系统；

工具要求

aiofiles>=23.2.1

aiohttp>=3.9.4

appdirs>=1.4.4

art>=6.1

beautifulsoup4>=4.11.1

colorama>=0.4.6

fake_useragent>=1.5.0

PyYAML>=6.0.1

Requests>=2.31.0

rich>=13.7.1

urllib3>=1.26.18

工具安装

由于该工具基于Python 3开发，因此我们首先需要在本地设备上安装并配置好最新版本的Python 3环境。

接下来，广大研究人员可以直接使用下列命令将该项目源码克隆至本地：

git clone https://github.com/RevoltSecurities/Subdominator.git

然后切换到项目目录中，使用pip命令和项目提供的requirements.txt安装该工具所需的其他依赖组件：

cd Subdominatorpip install -r requirements.txt

或直接使用pip命令行工具安装最新版本的Subdominator：

pip install git+https://github.com/RevoltSecurities/Subdominator

Subdominator安装成功后即可使用，但如果想以最高级别高效地使用 subdominator，则某些源需要 API 密钥来设置，用户可以使用此命令：

subdominator -ls

__         __                       _                    __                _____  __  __   / /_   ____/ /  ____    ____ ___    (_)   ____   ____ _  / /_  ____    _____/ ___/ / / / /  / __ \ / __  /  / __ \  / __ `__ \  / /   / __ \ / __ `/ / __/ / __ \  / ___/(__  ) / /_/ /  / /_/ // /_/ /  / /_/ / / / / / / / / /   / / / // /_/ / / /_  / /_/ / / /    /____/  \__,_/  /_.___/ \__,_/   \____/ /_/ /_/ /_/ /_/   /_/ /_/ \__,_/  \__/  \____/ /_/     @RevoltSecurities[Version]: Subdominator current version v1.0.8 (latest)[INFO]: Current Available free passive resources: [45][INFO]: Sources marked with an * needs API key(s) or token(s) configuration to works[INFO]: Hey sanjai you can config your api keys or token here /home/sanjai/.config/Subdominator/provider-config.yaml to workabuseipDB                                                                                                                                                                                                                                     alienvault                                                                                                                                                                                                                                    anubis                                                                                                                                                                                                                                        bevigil*                                                                                                                                                                                                                                      binaryedge*                                                                                                                                                                                                                                   bufferover*                                                                                                                                                                                                                                   c99*                                                                                                                                                                                                                                          censys*                                                                                                                                                                                                                                       certspotter*                                                                                                                                                                                                                                  chaos*                                                                                                                                                                                                                                        columbusapi                                                                                                                                                                                                                                   crtsh                                                                                                                                                                                                                                         digitorus                                                                                                                                                                                                                                     dnsdumpster*                                                                                                                                                                                                                                  dnsrepo                                                                                                                                                                                                                                       fofa*                                                                                                                                                                                                                                         facebook*                                                                                                                                                                                                                                     fullhunt*                                                                                                                                                                                                                                     google*                                                                                                                                                                                                                                       hackertarget                                                                                                                                                                                                                                  huntermap*                                                                                                                                                                                                                                    intelx*                                                                                                                                                                                                                                       leakix*                                                                                                                                                                                                                                       myssl                                                                                                                                                                                                                                         netlas*                                                                                                                                                                                                                                       quake*                                                                                                                                                                                                                                        racent                                                                                                                                                                                                                                        rapidapi*                                                                                                                                                                                                                                     rapiddns                                                                                                                                                                                                                                      redhuntlabs*                                                                                                                                                                                                                                  rsecloud*                                                                                                                                                                                                                                     securitytrails*                                                                                                                                                                                                                               shodan*                                                                                                                                                                                                                                       shodanx                                                                                                                                                                                                                                       shrewdeye                                                                                                                                                                                                                                     sitedossier                                                                                                                                                                                                                                   subdomaincenter                                                                                                                                                                                                                               urlscan                                                                                                                                                                                                                                       virustotal*                                                                                                                                                                                                                                   waybackarchive                                                                                                                                                                                                                                whoisxml*                                                                                                                                                                                                                                     zoomeyeapi*                                                                                                                                                                                                                                   rapidfinder*: Rapidfinder requires rapidapi api key but before it required to subscribe for free and please see here: https://rapidapi.com/Glavier/api/subdomain-finder3/pricing                                                              rapidscan*: Rapidscan requires rapidapi api key but before it required to subscribe for free and please see here: https://rapidapi.com/sedrakpc/api/subdomain-scan1/pricing                                                                   coderog*: Coderog source required to subscribe for free and please see here: https://rapidapi.com/coderog-coderog-default/api/subdomain-finder5/pricing

工具使用

subdominator -h

__         __                       _                    __                _____  __  __   / /_   ____/ /  ____    ____ ___    (_)   ____   ____ _  / /_  ____    _____/ ___/ / / / /  / __ \ / __  /  / __ \  / __ `__ \  / /   / __ \ / __ `/ / __/ / __ \  / ___/(__  ) / /_/ /  / /_/ // /_/ /  / /_/ / / / / / / / / /   / / / // /_/ / / /_  / /_/ / / /    /____/  \__,_/  /_.___/ \__,_/   \____/ /_/ /_/ /_/ /_/   /_/ /_/ \__,_/  \__/  \____/ /_/     @RevoltSecurities[DESCRIPTION]: Subdominator a passive subdomain enumeration that discovers subdomains for your targets using with passive and open source resources[USAGE]:subdominator [flags][FLAGS]:[INPUT]:-d，--domain：枚举子域的域名；-dL，--domain-list：包含用于枚举子域的域的文件名；stdout：子域支持 stdout 以将其输出通过管道传输；[OUTPUT]:-o，--output：用于保存输出的文件名；-oD，--output-directory：用于保存输出的目录名（使用 -dL 标志时使用它）；[OPTIMIZATION]:-t，--timeout：每个源请求的超时值。    [Update]:-up，--update：更新子域以获取最新版本，但 yaml 源更新需要手动操作，以免影响您的 api 密钥配置；-duc, --disable-update-check ：禁用 subdominator 的自动更新检查；-sup, --show-updates ：显示 subdominator 的最新版本更新；[CONFIG]:-nt, --notify ：使用源 Slack、Pushbullet、Telegram、Discord 发送发现子域的通知；-p, --proxy ：与 subdominator 一起使用的 http 代理（用于调试 subdominator 的性能）；-cp, --config-path ：subdominator 读取 api 密钥的配置文件的自定义路径（默认路径：/home/sanjai/.config/Subdominator/provider-config.yaml）；        [DEBUG]:-h, --help ：显示此帮助消息并退出；-v, --version ：显示 subdominator 的当前版本和最新版本（如果可用）并退出；-ske, --show-key-error ：显示特定来源的信用不足和未提供密钥的密钥错误；-sre, --show-timeout-error ：显示连接超时的来源的超时错误；-nc, --no-color ：禁用 subdominator 的彩色输出；-ls, --list-source ：显示 subdominator 用于子域枚举和退出的来源；

工具运行截图

许可证协议

本项目的开发与发布遵循MIT开源许可协议。

项目地址

Subdominator：【GitHub传送门】

参考资料

Installing Subfinder - ProjectDiscovery Documentation

DNSDumpster.com - dns recon and research, find and lookup dns records

https://programmablesearchengine.google.com/controlpanel/create

https://developers.google.com/custom-search/v1/introduction

Subdominator：一款针对漏洞奖励计划的子域名安全枚举工具

关于Subdominator Subdominator是一款针对漏洞奖励计划的子域名安全枚举工具，可用于在漏洞搜寻和侦察过程中进行被动子域名枚举。它旨在通过高效枚举子域名和各种免费被动资源来帮助研究人员和网络安全专业人员发现潜在的安全漏洞。 Subdominator 与各种免费和付费…...

编程日记 2024/9/29 10:23:16

[leetcode]516_最长回文子序列

给你一个字符串 s ，找出其中最长的回文子序列，并返回该序列的长度。子序列定义为：不改变剩余字符顺序的情况下，删除某些字符或者不删除任何字符形成的一个序列。示例 1： 输入：s "bbbab" 输出&a…...

编程日记 2024/9/29 10:21:14

电子相册|智能化电子相册|基于java的电子相册管理系统设计与实现(源码+数据库+文档)

电子相册管理系统目录基于java的电子相册管理系统设计与实现一、前言二、系统功能设计三、系统实现四、数据库设计 1、实体ER图五、核心代码六、论文参考七、最新计算机毕设选题推荐八、源码获取： 博主介绍：✌️大厂码农|毕设布道师&…...

编程日记 2024/9/29 10:20:11

linux项目_c语言：Makefile编写、动态库生成、添加动态库路径

一直想搞懂Linux中Makefile是怎么管理项目的，知识积累到一定程度后，我就做了一个自己的缩小项目去把剩下的细节搞清楚代码： Service.c: #include <stdio.h> #include "lib_sevr.h" int main(){printf("输入a, b的值…...

编程日记 2024/9/29 10:19:09

Python学习（1）：字典、DataFrame的创建方法

1. 字典的创建方法 1.1 直接创建 # 创建一个包含姓名和年龄的字典 person {"name": "Alice", "age": 25}print(person) # 输出：{name: Alice, age: 25} 1.2 使用 dict() 函数 # 使用键值对列表创建字典 person dict(name"…...

编程日记 2024/9/29 10:17:07

async await 介绍从0手动实现async await

1 async await介绍 async 和 await 是用于处理异步编程的语法糖，它们简化了异步操作的编写，使其看起来像同步代码。通过 async 标记一个函数为异步函数，返回的是一个 Promise 对象，而 await 用来暂停执行，直到 Promise…...

编程日记 2024/9/29 10:14:04

UDP校验和计算及网络中的校验和机制

UDP (User Datagram Protocol) 是一种无连接的传输层协议，它不像 TCP 那样提供可靠的传输保证。虽然 UDP 不保证数据可靠性，但它仍然提供了一个可选的校验和机制来检测数据在传输过程中出现的错误。理解UDP校验和的计算过程和其在网络中的作用至关重要。…...

编程日记 2024/9/29 10:13:03

如何使用C语言接入Doris数据库

如何使用C语言接入Doris数据库一、环境准备1. 安装MySQL C API2. Doris数据库环境二、编写C语言接入代码1. 包含必要的头文件2. 编写连接和查询函数3. 编译和运行程序三、注意事项1. 安全性2. 错误处理3. 性能优化4. 兼容性5. 调试和日志记录四、结论Doris（之前称为Palo或Apa…...

编程日记 2024/9/29 10:11:01

DarkLabel 2.4 目标追标注工具介绍

DarkLabel介绍 https://github.com/darkpgmr/DarkLabel 官方地址视频/图像标注工具，很适合用于目标追踪任务 DarkLabel可以在视频和图像中标注物体的边界框，并附上 ID 和name。还可以用于裁剪视频、从视频中采样训练图像以及对图像区域进行马赛克处理…...

编程日记 2024/9/29 10:08:58

uniapp设置从右上角到左下角的三种渐变颜色

推荐学习文档 golang应用级os框架，欢迎stargolang应用级os框架使用案例，欢迎star案例：基于golang开发的一款超有个性的旅游计划app经历golang实战大纲golang优秀开发常用开源库汇总想学习更多golang知识，这里有免费的golang学习笔…...

编程日记 2024/9/29 10:07:57

Python 解析 html

一、场景分析假设有如下 html 文档： 写一段 python 脚本，解析出里面的数据，包括经度维度。 <div classstorelist><ul><li lng"100.111111" lat"10.111111"><h4>联盟店1</h4><p>…...

编程日记 2024/9/29 10:06:53

“大数据+高职”：VR虚拟仿真实训室的发展前景

随着信息技术的迅猛发展，大数据技术与虚拟现实（VR）的融合正在为高等教育，尤其是高等职业教育（高职）带来革命性的变革。VR虚拟仿真实训室作为这一技术融合的典型应用，正逐步展现其在提升教育质量…...

编程日记 2024/9/29 10:05:51

Pygame中Sprite实现逃亡游戏4

在《Pygame中Sprite实现逃亡游戏3》中实现了玩家跳跃飞火的效果，接下来通过精灵类的碰撞检测来判断飞火是否击中玩家、飞火是否击中飞龙以及飞龙是否抓住玩家。 1 飞火是否击中玩家的判断判断飞火是否击中玩家的代码如图1所示。图1 判断飞火是否击中玩家的代码 …...

编程日记 2024/9/29 10:04:50

sentinel原理源码分析系列(一)-总述

背景微服务是目前java主流开发架构，微服务架构技术栈有，服务注册中心，网关，熔断限流，服务同学，配置中心等组件，其中，熔断限流主要3个功能特性，限流，熔断&…...

编程日记 2024/9/29 10:03:47

创建数据/采集数据+从PI数据到PC+实时UI+To PLC

Get_Data ---------- import csv import os import random from datetime import datetime import logging import time # 配置日志记录 logging.basicConfig(filename=D:/_Study/Case/Great_Data/log.txt, level=logging.INFO, format=%(asctime)s - %(l…...

编程日记 2024/9/29 10:02:45

Linux基础入门 --12 DAY(SHELL脚本编程基础)

shell脚本编程声明：首行shebang机制 #!/bin/bash #!/usr/bin/python #!/usr/bin/perl 变量变量类型变量类型： 内置变量 : 如 PS1 , PATH ,HISTSIZE 用户自定义变量不同变量存放数据不同，决定了以下 1.数据存储方式 2.参与的运算 3.表示…...

编程日记 2024/9/29 10:00:43

关于frp Web界面-----frp Server Dashboard 和 frp Client Admin UI

Web 界面官方文档：https://gofrp.org/zh-cn/docs/features/common/ui/ 目前 frpc 和 frps 分别内置了相应的 Web 界面方便用户使用。客户端 Admin UI 服务端 Dashboard 服务端 Dashboard 服务端 Dashboard 使用户可以通过浏览器查看 frp 的状态以及代理统计信…...

编程日记 2024/9/29 9:59:41

Hive数仓操作（一）

Hive 介绍 Hive 是一个基于 Hadoop 的数据仓库工具，旨在简化大规模数据集的管理和分析。它将结构化数据文件映射为表，并提供类似 SQL 的查询功能。Hive 的数据存储在 Hadoop 分布式文件系统（HDFS）中，使用 Hive 查询语…...

编程日记 2024/9/29 9:58:40

什么是NAND Flash？

什么是NAND Flash? NAND闪存是一种非易失性存储器技术，它彻底改变了数字时代的数据存储。它是闪存的一种形式，这意味着它可以被电擦除和重新编程。NAND闪存以NAND（NOT-AND）逻辑门命名，该逻辑门用于其基本架构。术语“…...

编程日记 2024/9/29 9:55:36

Spring Boot 整合 Keycloak

1、概览本文将带你了解如何设置 Keycloak 服务器，以及如何使用 Spring Security OAuth2.0 将 Spring Boot 应用连接到 Keycloak 服务器。 2、Keycloak 是什么？ Keycloak 是针对现代应用和服务的开源身份和访问管理解决方案。 Keycloak 提供了诸如单…...

编程日记 2024/9/29 9:52:32

电脑插入多块移动硬盘后经常出现卡顿和蓝屏

当电脑在插入多块移动硬盘后频繁出现卡顿和蓝屏问题时，可能涉及硬件资源冲突、驱动兼容性、供电不足或系统设置等多方面原因。以下是逐步排查和解决方案： 1. 检查电源供电问题问题原因：多块移动硬盘同时运行可能导致USB接口供电不足&#x…...

编程新知 2025/10/28 15:02:57

AI编程--插件对比分析：CodeRider、GitHub Copilot及其他

AI编程插件对比分析：CodeRider、GitHub Copilot及其他随着人工智能技术的快速发展，AI编程插件已成为提升开发者生产力的重要工具。CodeRider和GitHub Copilot作为市场上的领先者，分别以其独特的特性和生态系统吸引了大量开发者。本文将从功…...

编程新知 2026/1/25 16:39:17

【论文阅读28】-CNN-BiLSTM-Attention-（2024）

本文把滑坡位移序列拆开、筛优质因子，再用 CNN-BiLSTM-Attention 来动态预测每个子序列，最后重构出总位移，预测效果超越传统模型。文章目录 1 引言2 方法2.1 位移时间序列加性模型2.2 变分模态分解 (VMD) 具体步骤2.3.1 样本熵（S…...

编程新知 2026/2/2 3:06:53

mac 安装homebrew (nvm 及git)

mac 安装nvm 及git 万恶之源 mac 安装这些东西离不开Xcode。及homebrew 一、先说安装git步骤通用： 方法一：使用 Homebrew 安装 Git（推荐） 步骤如下：打开终端（Terminal.app） 1.安装 Homebrew…...

编程新知 2026/1/30 4:58:21

uniapp 小程序学习（一）

利用Hbuilder 创建项目运行到内置浏览器看效果下载微信小程序安装到Hbuilder 下载地址 ：开发者工具默认安装设置服务端口号在Hbuilder中设置微信小程序配置找到运行设置，将微信开发者工具放入到Hbuilder中， 打开后出现如下 bug 解…...

编程新知 2026/2/5 4:29:00

[论文阅读]TrustRAG: Enhancing Robustness and Trustworthiness in RAG

TrustRAG: Enhancing Robustness and Trustworthiness in RAG [2501.00879] TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation 代码：HuichiZhou/TrustRAG: Code for "TrustRAG: Enhancing Robustness and Trustworthin…...

编程新知 2026/2/4 17:33:27

Java详解LeetCode 热题 100(26):LeetCode 142. 环形链表 II（Linked List Cycle II）详解

文章目录 1. 题目描述1.1 链表节点定义 2. 理解题目2.1 问题可视化2.2 核心挑战 3. 解法一：HashSet 标记访问法3.1 算法思路3.2 Java代码实现3.3 详细执行过程演示3.4 执行结果示例3.5 复杂度分析3.6 优缺点分析 4. 解法二：Floyd 快慢指针法（…...

编程新知 2025/8/25 19:51:15

6.9-QT模拟计算器

源码: 头文件: widget.h #ifndef WIDGET_H #define WIDGET_H#include <QWidget> #include <QMouseEvent>QT_BEGIN_NAMESPACE namespace Ui { class Widget; } QT_END_NAMESPACEclass Widget : public QWidget {Q_OBJECTpublic:Widget(QWidget *parent nullptr);…...

编程新知 2026/2/6 5:43:28