subdog

A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.

Features

• Multiple Data Sources: Aggregates subdomains from 16+ different sources
• Duplicate Removal: Automatically removes duplicate subdomains across all sources
• Output to File: Save results to a file while still displaying output to terminal
• Verbose Mode: Detailed summary table showing counts, timing, and status for each source
• Parallel Processing: Run multiple sources simultaneously for faster results
• Normalization: Automatically filters out wildcard subdomains and email addresses
• Flexible Source Selection: Choose specific sources or exclude unwanted ones

Installation

go install github.com/rix4uni/subdog@latest

Download prebuilt binaries

wget https://github.com/rix4uni/subdog/releases/download/v0.0.5/subdog-linux-amd64-0.0.5.tgz
tar -xvzf subdog-linux-amd64-0.0.5.tgz
rm -rf subdog-linux-amd64-0.0.5.tgz
mv subdog ~/go/bin/subdog

Or download binary release for your platform.

Compile from source

git clone --depth 1 https://github.com/rix4uni/subdog.git
cd subdog; go install

Usage

Usage of subdog:
  -e, --exclude-source string   Comma-separated list of sources to exclude when using --source all
  -l, --list-sources            List all available sources and exit
  -o, --output string           Save subdomain results to a file
  -p, --parallel                Run all sources in parallel to speed up scanning
      --silent                  Silent mode.
  -s, --source string           Choose source(s) to use, or 'all' for all sources. Use --list-sources to see available sources (default "all")
      --verbose                 Enable verbose mode (shows detailed summary table with counts and timing)
      --version                 Print the version of the tool and exit.

Available Sources

• subdomaincenter - Subdomain Center API
• jldc - JLDC Subdomains
• virustotal - VirusTotal API
• alienvault - AlienVault OTX
• urlscan - URLScan.io
• certspotter - CertSpotter API
• hackertarget - HackerTarget API
• crtsh - crt.sh Certificate Search
• trickest - Trickest Inventory
• subdomainfinder - C99 Subdomain Finder
• chaos - Chaos Project Discovery
• merklemap - MerkleMap API
• shodan - Shodan API
• reverseipdomain - Reverse IP Domain
• dnsdumpster - DNS Dumpster
• bugbountydata - BugBountyData

Usage Examples

Basic scan with all sources

echo "example.com" | subdog

Specific source only

echo "target.com" | subdog --source crtsh,certspotter

Exclude specific sources

echo "target.com" | subdog --exclude-source shodan,virustotal

Parallel processing for speed

echo "target.com" | subdog --silent --parallel

Save results to a file

echo "target.com" | subdog --output target.com.txt

Verbose output with summary table

echo "target.com" | subdog --verbose

Save results and show verbose summary

echo "target.com" | subdog --verbose --output target.com.txt

Scan multiple domains

cat subs.txt | subdog