projectdiscovery / subfinder

Fast passive subdomain enumeration tool.
https://projectdiscovery.io
MIT License
10.22k stars 1.27k forks source link

Concerning the issue with the API and advice on dictionary-based brute-force attacks #1088

Closed S1nK0000 closed 10 months ago

S1nK0000 commented 10 months ago

Hello, how should I handle the situation when I'm unsure about the correct format while adding an API? Additionally, does Subfinder support using a dictionary for brute-force attacks after passively obtaining subdomains? image

dogancanbakir commented 10 months ago

@WasteMaterial, Make sure the yaml format is valid and you can also use -cs, -collect-sources include all sources in the output (-json only) flag to include sources in result. And, consider subfinder as passive subdomain enumeration tool, for bruteforce or resolving, we have shuffledns and dnsx.

S1nK0000 commented 10 months ago

@WasteMaterial, 确保 yaml 格式有效,您还可以使用-cs, -collect-sources include all sources in the output (-json only)标志在结果中包含源。并且,将 subfinder 视为被动子域枚举工具,为了暴力破解或解析,我们有shufflednsdnsx

All right! Thank you for your answer have a good day :)