{"id":5397,"date":"2021-12-30T01:05:47","date_gmt":"2021-12-29T17:05:47","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=5397"},"modified":"2021-12-30T01:06:10","modified_gmt":"2021-12-29T17:06:10","slug":"assetfinder-find-related-domains-and-subdomains","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2021\/12\/assetfinder-find-related-domains-and-subdomains\/","title":{"rendered":"assetfinder &#8211; Find Related Domains and Subdomains"},"content":{"rendered":"<p>assetfinder is a Go-based tool to find related domains and subdomains that are potentially related to a given domain from a variety of sources including Facebook, ThreatCrowd, Virustotal and more.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2021\/12\/assetfinder-Find-Related-Domains-and-Subdomains-640x320.png\" alt=\"assetfinder - Find Related Domains and Subdomains\" width=\"640\" height=\"320\" class=\"alignnone size-medium wp-image-5580\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2021\/12\/assetfinder-Find-Related-Domains-and-Subdomains-640x320.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2021\/12\/assetfinder-Find-Related-Domains-and-Subdomains.png 960w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>assetfinder uses a variety of sources including those in the infosec space and social networks which can give relevant info:<\/p>\n<ul>\n<li>crt.sh<\/li>\n<li>certspotter<\/li>\n<li>hackertarget<\/li>\n<li>threatcrowd<\/li>\n<li>wayback machine<\/li>\n<li>dns.bufferover.run<\/li>\n<li>facebook &#8211; <em>Needs FB_APP_ID and FB_APP_SECRET environment variables set (https:\/\/developers.facebook.com\/) and you need to be careful with your app&#8217;s rate limits<\/em><\/li>\n<li>virustotal &#8211; <em>Needs VT_API_KEY environment variable set (https:\/\/developers.virustotal.com\/reference)<\/em><\/li>\n<li>findsubdomains &#8211; <em>Needs SPYSE_API_TOKEN environment variable set (the free version always gives the first response page, and you also get &#8220;25 unlimited requests&#8221;) \u2014 (https:\/\/spyse.com\/apidocs)<\/em><\/li>\n<\/ul>\n<p>Sources to be implemented:<\/p>\n<ul>\n<li>http:\/\/api.passivetotal.org\/api\/docs\/<\/li>\n<li>https:\/\/community.riskiq.com\/ (?)<\/li>\n<li>https:\/\/riddler.io\/<\/li>\n<li>http:\/\/www.dnsdb.org\/<\/li>\n<li>https:\/\/certdb.com\/api-documentation<\/li>\n<\/ul>\n<h2>Usage of assetfinder to Find Related Domains and Subdomains<\/h2>\n<p>The usage is very simple with only one option basically, to limit the search to subdomains only &#8211; by default it will scan for all associated domains and subdomains.<\/p>\n<pre>assetfinder [--subs-only] <domain><\/pre>\n<h3>Installing assetfinder to Find Related Domains and Subdomains<\/h3>\n<p>If you have Go installed and configured (i.e. with <code>$GOPATH\/bin<\/code> in your <code>$PATH<\/code>):<\/p>\n<pre>go get -u github.com\/tomnomnom\/assetfinder<\/pre>\n<p>Another similar and recent tool that uses many of these sources and more and is also worth checking out is The <a href=\"https:\/\/www.darknet.org.uk\/2020\/02\/owasp-amass-dns-enumeration-attack-surface-mapping-external-asset-discovery\/\">OWASP Amass Project- DNS Enumeration, Attack Surface Mapping &#038; External Asset Discovery<\/a>.<\/p>\n<p>You can download assetfinder here:<\/p>\n<p><strong>Source:<\/strong> <a href=\"https:\/\/github.com\/tomnomnom\/assetfinder\/archive\/refs\/heads\/master.zip\">assetfinder-master.zip<\/a><br \/>\n<strong>Linux:<\/strong> <a href=\"https:\/\/github.com\/tomnomnom\/assetfinder\/releases\/download\/v0.1.1\/assetfinder-linux-386-0.1.1.tgz\">assetfinder-linux-386-0.1.1.tgz<\/a><br \/>\n<strong>Windows:<\/strong> <a href=\"https:\/\/github.com\/tomnomnom\/assetfinder\/releases\/download\/v0.1.1\/assetfinder-windows-386-0.1.1.zip\">assetfinder-windows-386-0.1.1.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/tomnomnom\/assetfinder\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>assetfinder is a Go-based tool to find related domains and subdomains that are potentially related to a given domain from a variety of sources including Facebook, ThreatCrowd, Virustotal and more. assetfinder uses a variety of sources including those in the infosec space and social networks which can give relevant info: crt.sh certspotter hackertarget threatcrowd wayback [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":5580,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"assetfinder - Find Related Domains and Subdomains","_seopress_titles_desc":"assetfinder is a Go-based tool to find related domains and subdomains that are related to a given domain from a variety of sources including Facebook and more.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9],"tags":[],"featured_image_src":"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2021\/12\/assetfinder-Find-Related-Domains-and-Subdomains.png","featured_image_src_square":"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2021\/12\/assetfinder-Find-Related-Domains-and-Subdomains.png","author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5397"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=5397"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5397\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media\/5580"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=5397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=5397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=5397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}