# aboul3la/Sublist3r

Fast subdomains enumeration tool for penetration testers

Repository: https://github.com/aboul3la/Sublist3r
Canonical: https://ross.abutalabs.com/products/sublist3r
Language: Python
License: GPL-2.0
License Family: copyleft
Last push: 2024-08-02T00:00:30+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3915, "days_push": 762, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 11023, forks 2216 (observed 2026-08-28T04:10:45.893591+00:00)

## What it is
Sublist3r is a Python command-line tool that enumerates subdomains of a target domain using OSINT sources such as Google, Bing, Yahoo, Baidu, Netcraft, VirusTotal, and DNSdumpster. It integrates the subbrute module for optional DNS bruteforce and can scan discovered subdomains against specified TCP ports.

## Use cases
- enumerate subdomains of a domain for a pentest
- find hidden subdomains for bug bounty recon
- gather attack surface of a website via OSINT
- bruteforce DNS subdomains with a wordlist
- scan discovered subdomains for open TCP ports

## When to choose
- you need a fast, scriptable CLI for passive subdomain discovery
- you want to combine multiple search engines and OSINT sources in one run
- you're doing reconnaissance for penetration testing or bug bounty

## When to avoid
- you need active, large-scale DNS resolution at modern speed (newer tools like amass or subfinder are more maintained)
- you require Python 3.10+ compatibility or ongoing updates
- you need a GUI or API service rather than a CLI

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: osint, security, networking, cli
- domain: security, penetration-testing, osint, crawlers
- platform: python, windows, cli
- tags: subdomain-enumeration, dns, reconnaissance, bug-bounty, search-engines, linux, macos

## Member repositories
- aboul3la/Sublist3r (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:10:45.893591+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:17:12.717735+00:00, confidence not recorded.
  - readme: https://github.com/aboul3la/Sublist3r (fetched 2026-08-28T04:10:45.893591+00:00, sha f1c7140e7874)
  - registry_pypi: https://pypi.org/pypi/sublist3r/json (fetched 2026-08-29T08:15:37.406669+00:00, sha 056a96a53318)
- Data as of 2026-08-30T08:39:29.467469+00:00.