Subscan is a powerful subdomain enumeration tool built with Rust, specifically designed for penetration testing purposes. It combines various discovery techniques into a single, lightweight binary, making subdomain hunting easier and faster for security researchers
Features
- π΅οΈ Smart Discovery Tricks
- Use multiple search engines (
Google,Yahoo,Bing,DuckDuckGo, etc.) - Integrate with APIs like
Shodan,Censys,VirusTotaland more - Perform zone transfer checks
- Subdomain brute-forcing with optimized wordlists
- Use multiple search engines (
- π Resolve IP addresses for all subdomains
- π Export reports in
CSV,HTML,JSON, orTXTformats - π οΈ Configurable
- Customize HTTP requests (user-agent, timeout, etc.)
- Rotate requests via proxies (
--proxyargument) - Fine-tune IP resolver with
--resolverarguments - Filter and run specific modules with
--skipsand--modules
- π³ Docker Friendly
- Native support for
amd64andarm64Linux platforms - A tiny container that wonβt eat up your storage β under 1GB and ready to roll π
- Native support for
- π» Compatible with multiple platforms and easy to install as a single binary