当前位置：首页 > news >正文

Subdominator：一款针对漏洞奖励计划的子域名安全枚举工具

news 2026/5/13 8:29:14

关于Subdominator

Subdominator是一款针对漏洞奖励计划的子域名安全枚举工具，可用于在漏洞搜寻和侦察过程中进行被动子域名枚举。它旨在通过高效枚举子域名和各种免费被动资源来帮助研究人员和网络安全专业人员发现潜在的安全漏洞。

Subdominator 与各种免费和付费 API 被动源集成，以收集有价值的子域信息。

功能介绍

1、能够快速、强大地子域名枚举能力；

2、45+ 被动结果枚举子域；

3、可配置 API 密钥设置；

4、综合通知系统；

工具要求

aiofiles>=23.2.1

aiohttp>=3.9.4

appdirs>=1.4.4

art>=6.1

beautifulsoup4>=4.11.1

colorama>=0.4.6

fake_useragent>=1.5.0

PyYAML>=6.0.1

Requests>=2.31.0

rich>=13.7.1

urllib3>=1.26.18

工具安装

由于该工具基于Python 3开发，因此我们首先需要在本地设备上安装并配置好最新版本的Python 3环境。

接下来，广大研究人员可以直接使用下列命令将该项目源码克隆至本地：

git clone https://github.com/RevoltSecurities/Subdominator.git

然后切换到项目目录中，使用pip命令和项目提供的requirements.txt安装该工具所需的其他依赖组件：

cd Subdominatorpip install -r requirements.txt

或直接使用pip命令行工具安装最新版本的Subdominator：

pip install git+https://github.com/RevoltSecurities/Subdominator

Subdominator安装成功后即可使用，但如果想以最高级别高效地使用 subdominator，则某些源需要 API 密钥来设置，用户可以使用此命令：

subdominator -ls

__         __                       _                    __                _____  __  __   / /_   ____/ /  ____    ____ ___    (_)   ____   ____ _  / /_  ____    _____/ ___/ / / / /  / __ \ / __  /  / __ \  / __ `__ \  / /   / __ \ / __ `/ / __/ / __ \  / ___/(__  ) / /_/ /  / /_/ // /_/ /  / /_/ / / / / / / / / /   / / / // /_/ / / /_  / /_/ / / /    /____/  \__,_/  /_.___/ \__,_/   \____/ /_/ /_/ /_/ /_/   /_/ /_/ \__,_/  \__/  \____/ /_/     @RevoltSecurities[Version]: Subdominator current version v1.0.8 (latest)[INFO]: Current Available free passive resources: [45][INFO]: Sources marked with an * needs API key(s) or token(s) configuration to works[INFO]: Hey sanjai you can config your api keys or token here /home/sanjai/.config/Subdominator/provider-config.yaml to workabuseipDB                                                                                                                                                                                                                                     alienvault                                                                                                                                                                                                                                    anubis                                                                                                                                                                                                                                        bevigil*                                                                                                                                                                                                                                      binaryedge*                                                                                                                                                                                                                                   bufferover*                                                                                                                                                                                                                                   c99*                                                                                                                                                                                                                                          censys*                                                                                                                                                                                                                                       certspotter*                                                                                                                                                                                                                                  chaos*                                                                                                                                                                                                                                        columbusapi                                                                                                                                                                                                                                   crtsh                                                                                                                                                                                                                                         digitorus                                                                                                                                                                                                                                     dnsdumpster*                                                                                                                                                                                                                                  dnsrepo                                                                                                                                                                                                                                       fofa*                                                                                                                                                                                                                                         facebook*                                                                                                                                                                                                                                     fullhunt*                                                                                                                                                                                                                                     google*                                                                                                                                                                                                                                       hackertarget                                                                                                                                                                                                                                  huntermap*                                                                                                                                                                                                                                    intelx*                                                                                                                                                                                                                                       leakix*                                                                                                                                                                                                                                       myssl                                                                                                                                                                                                                                         netlas*                                                                                                                                                                                                                                       quake*                                                                                                                                                                                                                                        racent                                                                                                                                                                                                                                        rapidapi*                                                                                                                                                                                                                                     rapiddns                                                                                                                                                                                                                                      redhuntlabs*                                                                                                                                                                                                                                  rsecloud*                                                                                                                                                                                                                                     securitytrails*                                                                                                                                                                                                                               shodan*                                                                                                                                                                                                                                       shodanx                                                                                                                                                                                                                                       shrewdeye                                                                                                                                                                                                                                     sitedossier                                                                                                                                                                                                                                   subdomaincenter                                                                                                                                                                                                                               urlscan                                                                                                                                                                                                                                       virustotal*                                                                                                                                                                                                                                   waybackarchive                                                                                                                                                                                                                                whoisxml*                                                                                                                                                                                                                                     zoomeyeapi*                                                                                                                                                                                                                                   rapidfinder*: Rapidfinder requires rapidapi api key but before it required to subscribe for free and please see here: https://rapidapi.com/Glavier/api/subdomain-finder3/pricing                                                              rapidscan*: Rapidscan requires rapidapi api key but before it required to subscribe for free and please see here: https://rapidapi.com/sedrakpc/api/subdomain-scan1/pricing                                                                   coderog*: Coderog source required to subscribe for free and please see here: https://rapidapi.com/coderog-coderog-default/api/subdomain-finder5/pricing

工具使用

subdominator -h

__         __                       _                    __                _____  __  __   / /_   ____/ /  ____    ____ ___    (_)   ____   ____ _  / /_  ____    _____/ ___/ / / / /  / __ \ / __  /  / __ \  / __ `__ \  / /   / __ \ / __ `/ / __/ / __ \  / ___/(__  ) / /_/ /  / /_/ // /_/ /  / /_/ / / / / / / / / /   / / / // /_/ / / /_  / /_/ / / /    /____/  \__,_/  /_.___/ \__,_/   \____/ /_/ /_/ /_/ /_/   /_/ /_/ \__,_/  \__/  \____/ /_/     @RevoltSecurities[DESCRIPTION]: Subdominator a passive subdomain enumeration that discovers subdomains for your targets using with passive and open source resources[USAGE]:subdominator [flags][FLAGS]:[INPUT]:-d，--domain：枚举子域的域名；-dL，--domain-list：包含用于枚举子域的域的文件名；stdout：子域支持 stdout 以将其输出通过管道传输；[OUTPUT]:-o，--output：用于保存输出的文件名；-oD，--output-directory：用于保存输出的目录名（使用 -dL 标志时使用它）；[OPTIMIZATION]:-t，--timeout：每个源请求的超时值。    [Update]:-up，--update：更新子域以获取最新版本，但 yaml 源更新需要手动操作，以免影响您的 api 密钥配置；-duc, --disable-update-check ：禁用 subdominator 的自动更新检查；-sup, --show-updates ：显示 subdominator 的最新版本更新；[CONFIG]:-nt, --notify ：使用源 Slack、Pushbullet、Telegram、Discord 发送发现子域的通知；-p, --proxy ：与 subdominator 一起使用的 http 代理（用于调试 subdominator 的性能）；-cp, --config-path ：subdominator 读取 api 密钥的配置文件的自定义路径（默认路径：/home/sanjai/.config/Subdominator/provider-config.yaml）；        [DEBUG]:-h, --help ：显示此帮助消息并退出；-v, --version ：显示 subdominator 的当前版本和最新版本（如果可用）并退出；-ske, --show-key-error ：显示特定来源的信用不足和未提供密钥的密钥错误；-sre, --show-timeout-error ：显示连接超时的来源的超时错误；-nc, --no-color ：禁用 subdominator 的彩色输出；-ls, --list-source ：显示 subdominator 用于子域枚举和退出的来源；

工具运行截图

许可证协议

本项目的开发与发布遵循MIT开源许可协议。

项目地址

Subdominator：【GitHub传送门】

参考资料

Installing Subfinder - ProjectDiscovery Documentation

DNSDumpster.com - dns recon and research, find and lookup dns records

https://programmablesearchengine.google.com/controlpanel/create

https://developers.google.com/custom-search/v1/introduction

Subdominator：一款针对漏洞奖励计划的子域名安全枚举工具

关于Subdominator Subdominator是一款针对漏洞奖励计划的子域名安全枚举工具，可用于在漏洞搜寻和侦察过程中进行被动子域名枚举。它旨在通过高效枚举子域名和各种免费被动资源来帮助研究人员和网络安全专业人员发现潜在的安全漏洞。 Subdominator 与各种免费和付费…...

编程日记 2024/9/29 10:23:16

[leetcode]516_最长回文子序列

给你一个字符串 s ，找出其中最长的回文子序列，并返回该序列的长度。子序列定义为：不改变剩余字符顺序的情况下，删除某些字符或者不删除任何字符形成的一个序列。示例 1： 输入：s "bbbab" 输出&a…...

编程日记 2024/9/29 10:21:14

电子相册|智能化电子相册|基于java的电子相册管理系统设计与实现(源码+数据库+文档)

电子相册管理系统目录基于java的电子相册管理系统设计与实现一、前言二、系统功能设计三、系统实现四、数据库设计 1、实体ER图五、核心代码六、论文参考七、最新计算机毕设选题推荐八、源码获取： 博主介绍：✌️大厂码农|毕设布道师&…...

编程日记 2024/9/29 10:20:11

linux项目_c语言：Makefile编写、动态库生成、添加动态库路径

一直想搞懂Linux中Makefile是怎么管理项目的，知识积累到一定程度后，我就做了一个自己的缩小项目去把剩下的细节搞清楚代码： Service.c: #include <stdio.h> #include "lib_sevr.h" int main(){printf("输入a, b的值…...

编程日记 2024/9/29 10:19:09

Python学习（1）：字典、DataFrame的创建方法

1. 字典的创建方法 1.1 直接创建 # 创建一个包含姓名和年龄的字典 person {"name": "Alice", "age": 25}print(person) # 输出：{name: Alice, age: 25} 1.2 使用 dict() 函数 # 使用键值对列表创建字典 person dict(name"…...

编程日记 2024/9/29 10:17:07

async await 介绍从0手动实现async await

1 async await介绍 async 和 await 是用于处理异步编程的语法糖，它们简化了异步操作的编写，使其看起来像同步代码。通过 async 标记一个函数为异步函数，返回的是一个 Promise 对象，而 await 用来暂停执行，直到 Promise…...

编程日记 2024/9/29 10:14:04

UDP校验和计算及网络中的校验和机制

UDP (User Datagram Protocol) 是一种无连接的传输层协议，它不像 TCP 那样提供可靠的传输保证。虽然 UDP 不保证数据可靠性，但它仍然提供了一个可选的校验和机制来检测数据在传输过程中出现的错误。理解UDP校验和的计算过程和其在网络中的作用至关重要。…...

编程日记 2024/9/29 10:13:03

如何使用C语言接入Doris数据库

如何使用C语言接入Doris数据库一、环境准备1. 安装MySQL C API2. Doris数据库环境二、编写C语言接入代码1. 包含必要的头文件2. 编写连接和查询函数3. 编译和运行程序三、注意事项1. 安全性2. 错误处理3. 性能优化4. 兼容性5. 调试和日志记录四、结论Doris（之前称为Palo或Apa…...

编程日记 2024/9/29 10:11:01

DarkLabel 2.4 目标追标注工具介绍

DarkLabel介绍 https://github.com/darkpgmr/DarkLabel 官方地址视频/图像标注工具，很适合用于目标追踪任务 DarkLabel可以在视频和图像中标注物体的边界框，并附上 ID 和name。还可以用于裁剪视频、从视频中采样训练图像以及对图像区域进行马赛克处理…...

编程日记 2024/9/29 10:08:58

uniapp设置从右上角到左下角的三种渐变颜色

推荐学习文档 golang应用级os框架，欢迎stargolang应用级os框架使用案例，欢迎star案例：基于golang开发的一款超有个性的旅游计划app经历golang实战大纲golang优秀开发常用开源库汇总想学习更多golang知识，这里有免费的golang学习笔…...

编程日记 2024/9/29 10:07:57

Python 解析 html

一、场景分析假设有如下 html 文档： 写一段 python 脚本，解析出里面的数据，包括经度维度。 <div classstorelist><ul><li lng"100.111111" lat"10.111111"><h4>联盟店1</h4><p>…...

编程日记 2024/9/29 10:06:53

“大数据+高职”：VR虚拟仿真实训室的发展前景

随着信息技术的迅猛发展，大数据技术与虚拟现实（VR）的融合正在为高等教育，尤其是高等职业教育（高职）带来革命性的变革。VR虚拟仿真实训室作为这一技术融合的典型应用，正逐步展现其在提升教育质量…...

编程日记 2024/9/29 10:05:51

Pygame中Sprite实现逃亡游戏4

在《Pygame中Sprite实现逃亡游戏3》中实现了玩家跳跃飞火的效果，接下来通过精灵类的碰撞检测来判断飞火是否击中玩家、飞火是否击中飞龙以及飞龙是否抓住玩家。 1 飞火是否击中玩家的判断判断飞火是否击中玩家的代码如图1所示。图1 判断飞火是否击中玩家的代码 …...

编程日记 2024/9/29 10:04:50

sentinel原理源码分析系列(一)-总述

背景微服务是目前java主流开发架构，微服务架构技术栈有，服务注册中心，网关，熔断限流，服务同学，配置中心等组件，其中，熔断限流主要3个功能特性，限流，熔断&…...

编程日记 2024/9/29 10:03:47

创建数据/采集数据+从PI数据到PC+实时UI+To PLC

Get_Data ---------- import csv import os import random from datetime import datetime import logging import time # 配置日志记录 logging.basicConfig(filename=D:/_Study/Case/Great_Data/log.txt, level=logging.INFO, format=%(asctime)s - %(l…...

编程日记 2024/9/29 10:02:45

Linux基础入门 --12 DAY(SHELL脚本编程基础)

shell脚本编程声明：首行shebang机制 #!/bin/bash #!/usr/bin/python #!/usr/bin/perl 变量变量类型变量类型： 内置变量 : 如 PS1 , PATH ,HISTSIZE 用户自定义变量不同变量存放数据不同，决定了以下 1.数据存储方式 2.参与的运算 3.表示…...

编程日记 2024/9/29 10:00:43

关于frp Web界面-----frp Server Dashboard 和 frp Client Admin UI

Web 界面官方文档：https://gofrp.org/zh-cn/docs/features/common/ui/ 目前 frpc 和 frps 分别内置了相应的 Web 界面方便用户使用。客户端 Admin UI 服务端 Dashboard 服务端 Dashboard 服务端 Dashboard 使用户可以通过浏览器查看 frp 的状态以及代理统计信…...

编程日记 2024/9/29 9:59:41

Hive数仓操作（一）

Hive 介绍 Hive 是一个基于 Hadoop 的数据仓库工具，旨在简化大规模数据集的管理和分析。它将结构化数据文件映射为表，并提供类似 SQL 的查询功能。Hive 的数据存储在 Hadoop 分布式文件系统（HDFS）中，使用 Hive 查询语…...

编程日记 2024/9/29 9:58:40

什么是NAND Flash？

什么是NAND Flash? NAND闪存是一种非易失性存储器技术，它彻底改变了数字时代的数据存储。它是闪存的一种形式，这意味着它可以被电擦除和重新编程。NAND闪存以NAND（NOT-AND）逻辑门命名，该逻辑门用于其基本架构。术语“…...

编程日记 2024/9/29 9:55:36

Spring Boot 整合 Keycloak

1、概览本文将带你了解如何设置 Keycloak 服务器，以及如何使用 Spring Security OAuth2.0 将 Spring Boot 应用连接到 Keycloak 服务器。 2、Keycloak 是什么？ Keycloak 是针对现代应用和服务的开源身份和访问管理解决方案。 Keycloak 提供了诸如单…...

编程日记 2024/9/29 9:52:32

Hperledger Fabric入门课程3 ——软硬件环境

购买专栏前请认真阅读：《Fabric项目学习笔记》专栏介绍 1. 硬件环境不论是在当前系统上运行、云服务器还是虚拟机，建议内存4G或以上，硬盘空间建议50G以上。 2. 操作系统 Fabric 的操作一般在Linux 或 MacOS上，Mac暂时不支持Apple Silicon芯片即m1以后的芯片。如果读者…...

编程新知 2026/5/13 5:05:46

cua_desktop_operator_cli_skill：用命令行自动化桌面操作的效率利器

1. 项目概述：一个桌面操作员的命令行技能集最近在开源社区里看到一个挺有意思的项目，叫cua_desktop_operator_cli_skill。光看这个名字，可能有点摸不着头脑，但如果你是一个经常需要和电脑桌面、各种应用程序打交道的“操作员”&am…...

编程新知 2026/5/13 5:03:46

LMQL：用编程语言精准控制大语言模型输出，告别提示词玄学

1. 项目概述：当自然语言成为编程语言如果你和我一样，既对大型语言模型（LLM）的能力感到兴奋，又对如何精准、可控地调用它们感到头疼，那么你肯定遇到过这样的场景：你向ChatGPT或Claude提出一个复杂…...

编程新知 2026/5/13 2:36:22

FreeVA：零训练成本，用图像大模型实现视频理解的新范式

1. 项目概述：一个无需训练的“零成本”视频助手最近在折腾多模态大模型（MLLM）的时候，我发现了一个挺有意思的现象：大家一提到让模型理解视频，第一反应就是得搞“视频指令微调”。简单说，就是拿…...

编程新知 2026/5/13 2:00:54

Windows安装安卓APK的完整指南：APK Installer免费工具使用教程

Windows安装安卓APK的完整指南：APK Installer免费工具使用教程【免费下载链接】APK-Installer An Android Application Installer for Windows 项目地址: https://gitcode.com/GitHub_Trending/ap/APK-Installer 还在为电脑无法运行安卓应用而烦恼吗&#x…...

编程新知 2026/5/13 0:36:28