Subscan is a powerful subdomain enumeration tool built with Rust, specifically designed for penetration testing purposes. It combines various discovery techniques into a single, lightweight binary, making subdomain hunting easier and faster for security researchers
Features
- 🕵️ Smart Discovery Tricks
- Use multiple search engines (
Google,Yahoo,Bing,DuckDuckGo, etc.) - Integrate with APIs like
Shodan,Censys,VirusTotaland more - Perform zone transfer checks
- Subdomain brute-forcing with optimized wordlists
- Use multiple search engines (
- 🔍 Resolve IP addresses for all subdomains
- 📎 Export reports in
CSV,HTML,JSON, orTXTformats - 🛠️ Configurable
- Customize HTTP requests (user-agent, timeout, etc.)
- Rotate requests via proxies (
--proxyargument) - Fine-tune IP resolver with
--resolverarguments - Filter and run specific modules with
--skipsand--modules
- 🐳 Docker Friendly
- Native support for
amd64andarm64Linux platforms - A tiny container that won't eat up your storage — under 1GB and ready to roll 🚀
- Native support for
- 💻 Compatible with multiple platforms and easy to install as a single binary