Free Subdomain Enumeration Tool
Subdomain Finder
Discover all subdomains of any domain using certificate transparency logs (crt.sh), DNS brute-force with 100+ common subdomains, and HackerTarget API. Free, no signup.
How it works
- 1. Queries crt.sh for SSL certificate transparency records
- 2. DNS brute-force with 100+ common subdomain names
- 3. HackerTarget passive DNS aggregation
- 4. Deduplicates and sorts all results
Want more power?
CyberMind CLI runs subfinder + amass + puredns + alterx + dnsx in parallel — finds 10x more subdomains.
cybermind /recon example.comInstall free →