Subdomain finder API: search ~3B hostnames with wildcards (*admin*) for passive subdomain enumeration and attack-surface recon. Free, no key. Python library, CLI & AI-agent ready.
-
Updated
Sep 6, 2026 - Python
Subdomain finder API: search ~3B hostnames with wildcards (*admin*) for passive subdomain enumeration and attack-surface recon. Free, no key. Python library, CLI & AI-agent ready.
OSINT tool for infrastructure reconnaissance, subdomain enumeration via crt.sh and subfinder, owner classification using WHOIS data, and archive scanning across Common Crawl and Wayback Machine.
web reconnaissance crawler - maps attack surfaces, fingerprints technologies, and catalogs every form, endpoint, and parameter on a target domain
To associate your repository with the attack-surface-discovery topic, visit your repo's landing page and select "manage topics."