Sublist3r-rs

A simple subdomain enumeration tool using only passive online sources. Written in Rust and inspired by Sublist3r and subfinder.

I created this project to learn async/await patterns in Rust and explore the Tokio crate.

Installation

Using cargo

git clone https://github.com/nt54hamnghi/sublist3r-rs.git
cd sublist3r-rs
cargo install --path .

Usage

Basic usage (this will use all available search engines):

s7r -d example.com

With specific search engines:

s7r -d example.com -e crtsh -e virustotal

# or as comma-separated values
s7r -d example.com -e crtsh,virustotal

Enable verbose output:

s7r -d example.com -v

Generate shell completions:

s7r --completion bash  # or zsh, fish, etc.

Full Help Message

Usage: s7r [OPTIONS]

Options:
  -d, --domain <DOMAIN>
          Domain name to enumerate it's subdomains

  -e, --engines <ENGINES>
          Specify a comma-separated list of search engines
          
          [possible values: alienvault, bing, crtsh, dnsdumpster, google, hackertarget, rapiddns, virustotal, yahoo]

  -v, --verbose
          Enable Verbosity and display results in realtime

  -c, --completion <COMPLETION>
          Generate completion for the given shell
          
          [possible values: bash, elvish, fish, powershell, zsh]

  -h, --help
          Print help (see a summary with '-h')

  -V, --version
          Print version

Disclaimer

This tool is for educational purposes only. Users are responsible for ensuring they have permission to scan any domain before using this tool. Please respect the terms of use of all data sources used by this tool. Some search engines may have rate limits. The tool is provided as-is without any warranties.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Author

Nghi Nguyen (hamnghi250699@gmail.com)