Subdomain Finder
Request parameters
Parameters |
---|
The ID of this tool. The value is
20 .
|
The domain name that will be searched for subdomains.
|
Extract also web server details for each subdomain (Server Type, Operating System, Technlogy, Web Platform, Page Title). Turn this option off for faster results. The value can be
"on" or "off" .
Show IP information (netname, country). The value can be
"on" or "off" .
DNS records (NS, MX, TXT, AXFR). The value can be
"on" or "off" .
DNS enumeration. The value can be
"on" or "off" .
Certificate Transparency Logs. The value can be
"on" or "off" .
Certificate Transparency Logs. The value can be
"on" or "off" .
Bing search. The value can be
"on" or "off" .
Google search. The value can be
"on" or "off" .
Extract from HTML links. The value can be
"on" or "off" .
Extract from SSL certificates. The value can be
"on" or "off" .
Reverse DNS on target IP ranges. The value can be
"on" or "off" .
Smart DNS search - Disabling this option will speed up the scan if the target has a large number of subdomains, but might reduce the number of results. The value can be
"on" or "off" .
|
{
"op": "start_scan",
"tool_id": 20,
"target": "bbc.com",
"tool_params": {
"web_details": "on"
}
}
{
"op": "start_scan_by_targetid",
"tool_id": 20,
"target_id": 7456213,
"tool_params": {
"web_details": "on",
"do_smart_search": "off"
}
}