Subscan is a powerful subdomain enumeration tool built with Rust, specifically designed for penetration testing purposes. It combines various discovery techniques into a single, lightweight binary, making subdomain hunting easier and faster for security researchers
Features
- 🕵️ Smart Discovery Tricks
- Use multiple search engines (
Google
,Yahoo
,Bing
,DuckDuckGo
, etc.) - Integrate with APIs like
Shodan
,Censys
,VirusTotal
and more - Perform zone transfer checks
- Subdomain brute-forcing with optimized wordlists
- Use multiple search engines (
- 🔍 Resolve IP addresses for all subdomains
- 📎 Export reports in
CSV
,HTML
,JSON
, orTXT
formats - 🛠️ Configurable
- Customize HTTP requests (user-agent, timeout, etc.)
- Rotate requests via proxies (
--proxy
argument) - Fine-tune IP resolver with
--resolver
arguments - Filter and run specific modules with
--skips
and--modules
- 🐳 Docker Friendly
- Native support for
amd64
andarm64
Linux platforms - A tiny container that won't eat up your storage — under 1GB and ready to roll 🚀
- Native support for
- 💻 Compatible with multiple platforms and easy to install as a single binary