Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Contact Us
Online Help
Domain Status
Man Pages

Virtual Servers

Topology Map

Server Agreement
Year 2038

USA Flag



Man Pages

Findomain - manual page for Findomain 5.0.0

Findomain 5.0.0 Eduard Tolosa <> The fastest and cross-platform subdomain enumerator, do not waste your time.

findomain [FLAGS] [OPTIONS]

-x, --as-resolver
Use Findomain as resolver for a list of domains in a file.
Allow Findomain to insert data in the database when the webhook returns a timeout error.
Enable DNS over TLS for resolving subdomains IPs.
Send alert to webhooks still when no new subdomains have been found.
Get external subdomains with amass and subfinder.
-h, --help
Prints help information
Check the HTTP status of subdomains.
-i, --ip
Show/write the ip address of resolved subdomains.
Perform a IPv6 lookup only.
-m, --monitoring-flag
Activate Findomain monitoring mode.
Disable monitoring mode while saving data to database.
Disable pre-screenshotting jobs (http check and ip discover) when used as resolver to take screenshots.
Disable wilcard detection when resolving subdomains.
-o, --output
Write to an output file. The name of the output file will be the target string with TXT format.
Enable port scanner.
Query the findomain database to search subdomains that have already been discovered.
Extract all the subdomains from the database where the job name is the specified using the jobname option.
-q, --quiet
Remove informative messages but show fatal errors or subdomains not found message.
Enable randomization when reading targets from files.
-r, --resolved
Show/write only resolved subdomains.
Enable Chrome/Chromium sandbox. It is disabled by default because a big number of users run the tool using the root user by default. Make sure you are not running the program as root user before using this option.
Read from stdin instead of files or aguments.
-V, --version
Prints version information
-v, --verbose
Enable verbose mode (useful to debug problems).

-c, --config <config-file>

Use a configuration file. The default configuration file is findomain and the format can be toml, json, hjson, ini or yml.

--resolvers <custom-resolvers>...

Path to a file (or files) containing a list of DNS IP address. If no specified then Google, Cloudflare and Quad9 DNS servers are used.

--exclude-sources <exclude-sources>...

Exclude sources from searching subdomains in. [possible values: certspotter, crtsh, virustotal, sublist3r, facebook, spyse, bufferover, threatcrowd, virustotalapikey, anubis, urlscan, securitytrails, threatminer, archiveorg, c99, ctsearch]
-f, --file <files>...
Use a list of subdomains writen in a file as input.

--http-timeout <http-timeout>

Value in seconds for the HTTP Status check of subdomains. Default 5.

--import-subdomains <import-subdomains>...

Import subdomains from one or multiple files. Subdomains need to be one per line in the file to import.
--iport <initial-port>
Initial port to scan. Default 0.

-j, --jobname <jobname>

Use an database identifier for jobs. It is useful when you want to relate different targets into a same job name. To extract the data by job name identifier, use the query-jobname option.
--lport <last-port>
Last port to scan. Default 1000.
--postgres-database <postgres-database>
Postgresql database.
--postgres-host <postgres-host>
Postgresql host.
--postgres-password <postgres-password>
Postgresql password.
--postgres-port <postgres-port>
Postgresql port.
--postgres-user <postgres-user>
Postgresql username.
--rate-limit <rate-limit>
Set the rate limit in seconds for each target during enumeration.

-s, --screenshots <screenshots-path>

Path to save the screenshots of the HTTP(S) website for subdomains with active ones.
--exclude <string-exclude>...
Exclude subdomains containing specifics strings.
--filter <string-filter>...
Filter subdomains containing specifics strings.
-t, --target <target>
Target host.
--threads <threads>
Number of threads to use to perform subdomains resolution.

-u, --unique-output <unique-output>

Write all the results for a target or a list of targets to a specified filename.
--ua <user-agents-file>
Path to file containing user agents strings.

-w, --wordlist <wordlists>

Wordlist file to use in the bruteforce process. Using it option automatically enables bruteforce mode.

The full documentation for Findomain is maintained as a Texinfo manual. If the info and Findomain programs are properly installed at your site, the command
info Findomain

should give you access to the complete manual.

August 2021 Findomain 5.0.0

Search for    or go to Top of page |  Section 1 |  Main Index

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with ManDoc.