subfinder is a subdomain discovery tool that returns valid subdomains for
websites, using passive online sources. It has a simple, modular architecture
and is optimized for speed.
subfinder is built for doing one thing only - passive subdomain enumeration,
and it does that very well. We have made it to comply with all the used
passive source licenses and usage restrictions.
The passive model guarantees speed and stealthiness that can be leveraged by
both penetration testers and bug bounty hunters alike.
Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.