assetfinder

Find domains/subdomains related to a target.

KaliParrotpassive

pkg: assetfinder

assetfinder pulls related domains and subdomains from passive sources — great in recon pipelines.

Syntax

assetfinder [--subs-only] {domain}

Example

assetfinder --subs-only example.com

Prints subdomains only, ideal to pipe into httpx/nuclei.

Advantages
  • Tiny, fast, pipeable
  • Pure passive
Disadvantages
  • Fewer sources than amass
  • No validation
Tags
#subdomains#recon

Official docs: assetfinder

Related commands

Frequently asked questions

What is assetfinder used for?
assetfinder pulls related domains and subdomains from passive sources — great in recon pipelines.
What is an example assetfinder command?
A common example is: assetfinder --subs-only example.com — Prints subdomains only, ideal to pipe into httpx/nuclei.
Is assetfinder part of Kali Linux?
Yes. assetfinder ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install assetfinder.
What category of security tool is assetfinder?
assetfinder is a Information Gathering tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →