assetfinder Documentation

repository·master·Indexed 25 days ago

https://github.com/tomnomnom/assetfinder

A tool for discovering domains and subdomains related to a target domain by querying public sources. Supports single domain arguments or piped input via stdin, automatic deduplication, and a --subs-only flag to restrict output to subdomains. Integration with Facebook, VirusTotal, and Spyse requires specific environment variables: FB_APP_ID, FB_APP_SECRET, VT_API_KEY, and SPYSE_API_TOKEN.

Tokens
397
Snippets
2
Records
5
Agent score
37%

What's inside assetfinder

  1. Install assetfinder

    master

    If you have Go installed and configured (with $GOPATH/bin in your $PATH), you can install assetfinder using go get. Alternatively, you can download pre-compiled releases for your platform from the GitHub releases page. To run the tool easily from any terminal session, ensure the binary is located in your $PATH.

    go get -u github.com/tomnomnom/assetfinder
  2. Configure environment variables for assetfinder sources

    master

    Some data sources used by assetfinder require API keys or credentials to be set via environment variables. Ensure the following variables are set in your environment to enable these specific sources:

    • Facebook: Requires FB_APP_ID and FB_APP_SECRET.
    • VirusTotal: Requires VT_API_KEY.
    • Spyse (findsubdomains): Requires SPYSE_API_TOKEN.
  3. Use assetfinder to find domains and subdomains

    master

    Run assetfinder followed by a domain name to find potentially related domains and subdomains. You can use the --subs-only flag if you want to restrict the output to subdomains only.

    assetfinder [--subs-only] <domain>
  4. Use the assetfinder CLI

    master
    assetfinder finds subdomains for a given domain by querying various online sources. You can provide a single domain as a command-line argument or pipe a list of domains via stdin. The tool automatically deduplicates results and cleans domain formatting.
  5. Filter results with --subs-only

    master
    When using the assetfinder CLI, you can use the --subs-only flag to restrict the output. When this flag is enabled, the tool will only include domains that are subdomains of the original search domain (i.e., they must end with the search domain).