Subdomain name, side station
One
https://tools.ipip.net/ipdomain.php?ip=xxxx
https://cn.bing.com/search?q=ip:xxxx Bing search
https://api.hackertarget.com/reverseiplookup/?q =xxx.com
https://securitytrails.com/dns-trails A more commonly used one
https://www.robtex.com/cidr/xxxx-x
https://fofa.so/
https://x.threatbook. cn
two
https://site.ip138.com/
http://ti.qianxin.com
http://www.dnsscan.cn/
https://censys.io/
https://www.shodan.io/
http://www.crimeflare.org:82/cfs.html
https://viewdns.info
https://bgp.he.net
http://sbd.ximcx.cn
http://www.nsoad.com/Security-tools/20181218/tools-1228.html
3. Google mirror collection station, updated regularly
https://www.uedbox.com/post/54776/ Google mirror collection site, updated regularly
four
https://dnsdumpster.com/
https://www.virustotal.com/gui/home/search
https://findsubdomains.com/
Too many online URLs
https://dns.bufferover.run/dns?q=baidu.com
V. Subdomain blasting
kali fierce -dns domain name -threads 10 (need to go over the wall, foreign priority is required)
site:test.com #百度,必应,google
Example: site:test.com -www -app #Search test.com domain name, remove www,app At the beginning
https://d.chinacycc.com #在线子域名扫描
https://urlscan.io #在线爬去子域名超级快
https://phpinfo.me/domain/?from=lu4n.com 子域名爆破
http://i.links.cn/subdomain/ #在线子域名查询
https://x.threatbook.cn/partner 微步情报分析 (子域名whois,ip都OK)
https://www.virustotal.com/#/domain/ #域名分析
http://ce.baidu.com/index/getRelatedSites?site_address= Use Baidu cloud to monitor
subDomainsBrute-master blasting, SubDomainizer blasting, operating environment #python2.7 #High efficiency, but overall I feel that there is no subdomain excavator as good
https:/ /api.hackertarget.com/reverseiplookup/?q=jxcia.com
其他子域名爆破
JSFinder(https://github.com/Threezh1/JSFinder)
Sublist3r(https://github.com/aboul3la/Sublist3r)