tomnomnom/assetfinder

Health v2 · maintenance only

Adoption not part of the score

3666 stars · 548 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A Go command-line tool that discovers domains and subdomains potentially related to a given domain by querying multiple passive sources like crt.sh, VirusTotal, and the Wayback Machine. It is commonly used for reconnaissance in security assessments and bug bounty hunting.

Use cases

• find subdomains of a target domain
• enumerate assets for a bug bounty scope
• passive reconnaissance on a company's domains
• discover related domains via certificate transparency logs
• build a subdomain list for security scanning
• map an organization's external attack surface

When to choose

• you need a fast, single-purpose CLI for passive subdomain discovery
• you want to aggregate results from multiple free OSINT sources
• you prefer lightweight Go tools that pipe into other recon utilities

When to avoid

• you need active subdomain brute-forcing or DNS resolution
• you want a full-featured reconnaissance framework with reporting
• you require actively maintained source integrations or new features

Facets

cli-tool · maturity maintenance

web-scraping search-engine security cli security osint crawlers developer-tools windows cli cross-platform subdomain-enumeration osint recon bug-bounty attack-surface-discovery command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tomnomnom/assetfinder")