{"name":"Sublist3r: Enumerate Website Subdomains with OSINT","description":"Sublist3r is a Python tool for penetration testers and bug hunters to discover a target domain’s subdomains. It gathers results from search engines and security data sources, with optional DNS brute forcing and port checks.","github":"https://github.com/aboul3la/Sublist3r","url":"https://osrepos.com/repo/aboul3la-sublist3r","source":"osrepos.com","sourceDescription":"This repository profile is provided by osrepos.com, an open source repository discovery platform.","repositoryProfile":"https://osrepos.com/repo/aboul3la-sublist3r","generatedFor":"open source discovery and AI-assisted research","markdown":"https://osrepos.com/repo/aboul3la-sublist3r.md","json":"https://osrepos.com/repo/aboul3la-sublist3r.json","topics":["python","security","cli","subdomain-enumeration","osint","dns-bruteforce"],"keywords":["python","security","cli","subdomain-enumeration","osint","dns-bruteforce"],"stars":null,"summary":"Sublist3r is a Python tool for penetration testers and bug hunters to discover a target domain’s subdomains. It gathers results from search engines and security data sources, with optional DNS brute forcing and port checks.","content":"## Overview\nSublist3r is a Python OSINT tool for penetration testers and bug hunters who need to identify subdomains of a target website. It gathers results from search engines including Google, Yahoo, Bing, Baidu, and Ask, as well as sources such as Netcraft, VirusTotal, ThreatCrowd, DNSdumpster, and ReverseDNS.\n\nOptional brute forcing uses the integrated subbrute module and its wordlist. The command-line tool can also check discovered subdomains against specified TCP ports, or be imported into Python scripts to return a set of unique results.\n\n## Key Features\n- Collects subdomains from multiple search engines and security-oriented data sources.\n- Optionally brute-forces names through the integrated subbrute module.\n- Checks discovered subdomains against specified TCP ports.\n- Supports selecting search engines for an enumeration run.\n- Shows results as they are found in verbose mode.\n- Saves results to a text file.\n- Exposes a Python function that returns a set of unique subdomains.\n\n## Use Cases\n- Penetration testers mapping a target domain before an authorized assessment.\n- Bug hunters gathering subdomains to expand the scope of a permitted security review.\n- Security teams combining search-engine discovery with optional DNS brute forcing.\n- Python users incorporating subdomain enumeration into an existing script or workflow.\n\n## Our Take\nSublist3r offers a focused OSINT workflow, but its inactive maintenance makes it harder to rely on for ongoing security work.\n\n**Good fit if:**\n- You need a Python-based subdomain enumeration tool for authorized testing.\n- You value combining multiple search sources with optional brute forcing and port checks.\n- You can assess and maintain the tool yourself under the GPL-2.0 license.\n\n**Look elsewhere if:**\n- You need a project with recent maintenance: there have been no commits for over a year, no releases in the past year, and no issues or pull requests closed in the recent measurement period.\n- You require an actively maintained dependency or support workflow.\n- GPL-2.0 obligations do not suit your intended use or distribution.\n\n## Project Health\n\n| Signal | Value |\n|---|---|\n| Status | **Inactive**: no commits in over a year |\n| Last commit | 2024-08-02 (2.2 years ago) |\n| Commits, last 90 days | 0 |\n| Releases, last 12 months | 0 (latest 1.1, 2020-04-06) |\n| Contributors | 22 (top contributor: 68% of commits) |\n| Issues closed, last 90 days | 0 |\n| Pull requests merged, last 90 days | 0 |\n| Project age | 10 years |\n\nChecked on 2026-10-27 with the GitHub API.\n\n## Project Facts\n\n- Language: Python\n- License: GPL-2.0\n- Stars: 11.1k\n- Forks: 2.2k\n- Archived: no\n\n## What You Need\n\nDetected in the repository:\n\n- Python (from setup.py)\n\n## Getting Started\nClone the repository and install its requirements:\n\n```bash\ngit clone https://github.com/aboul3la/Sublist3r.git\n```\n\nSee the [README](https://github.com/aboul3la/Sublist3r) for dependency installation and usage details.\n\n## License in Plain Words\n\n**GPL-2.0** (strong copyleft).\n\n- Commercial use: yes\n- Modify and redistribute: yes\n- You must keep: the license notice\n- Share your changes: yes, the full source of anything you distribute that includes it, under the GPL\n\nA summary, not legal advice: the LICENSE file is what applies.\n\n## Alternatives\n\n- [subwiz](https://osrepos.com/repo/hadriansecurity-subwiz): Subwiz predicts subdomains with a lightweight transformer and checks them by resolving DNS, while Sublist3r gathers results from search engines and security data sources.\n\n| Project | Language | License | Stars | Status |\n|---|---|---|---|---|\n| **Sublist3r** | Python | GPL-2.0 | 11.1k | Inactive |\n| [subwiz](https://osrepos.com/repo/hadriansecurity-subwiz) | Python | MIT | 389 | Active |\n\n## Considerations\nThe repository is marked inactive, with no commits for over a year and no recent releases. Although it has 22 contributors and code is not highly concentrated in one contributor, recent issue and pull-request handling is absent in the measured period. The README lists support for Python 2 and Python 3, while recommending Python 2.7 or Python 3.4, so teams should verify compatibility with their current runtime and dependencies. The project is licensed under GPL-2.0; review its terms before incorporating or distributing it.","metrics":{"detailViews":0,"githubClicks":0},"dates":{"published":null,"modified":"2026-10-27T11:03:22.000Z"}}