Assetfinder — Reconnaissance | Tools

Description

Assetfinder finds domains and subdomains potentially related to a given domain. It queries multiple data sources to find related assets quickly and efficiently.

Installation

BASH

go install github.com/tomnomnom/assetfinder@latest

Basic Usage

                        BASH
                        
                            # Find all related domains and subdomains
assetfinder target.com

# Subdomains only (exclude parent domain)
assetfinder --subs-only target.com

# Save output
assetfinder --subs-only target.com > subs.txt

Advanced Usage

                        BASH
                        
                            # Pipe from stdin
echo "target.com" | assetfinder --subs-only

# Multiple domains
cat domains.txt | while read d; do assetfinder --subs-only $d; done | sort -u

Common Workflows

                        BASH
                        
                            # Quick subdomain recon pipeline
assetfinder --subs-only target.com | httpx -silent | nuclei -t cves/

# Combine with other tools
(assetfinder --subs-only target.com; subfinder -d target.com -silent) | sort -u > all-subs.txt