Sublist3r
Sublist3r is a python tool for enumerating subdomains using OSINT and various search engines.
Exposure & Vulnerability ManagementExternal Attack Surface ManagementOn-PremisesStartup · SMB · Mid-Market · EnterpriseFree10,855
Sublist3r is a python tool for enumerating subdomains using OSINT and various search engines.
Checked October 2026.
Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask.
Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS. subbrute was integrated with Sublist3r to increase the possibility of finding more subdomains using bruteforce with an improved wordlist. The credit goes to TheRook who is the author of subbrute.
Screenshots Installation git clone https://github.com/aboul3la/Sublist3r.git Recommended Python Version: Sublist3r currently supports Python 2 and Python 3. The recommended version for Python 2 is 2.7.x The recommended version for Python 3 is 3.4.x Dependencies: Sublist3r depends on the requests, dnspython and argparse python modules.
These dependencies can be installed using the requirements file: Installation on Windows: c:\python27\python.exe -m pip install -r requirements.txt Installation on Linux sudo pip install -r requirements.txt Alternatively, each module can be install
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Sublist3r: features, pricing and alternatives.
Sublist3r is a product in the External Attack Surface Management category. It covers Bug Bounty, OSINT and Subdomain Enumeration.
Sublist3r is free. Download and setup instructions are at https://github.com/aboul3la/Sublist3r/.
Alternatives to Sublist3r listed on CybersecTools:
Compare all Sublist3r alternatives at https://cybersectools.com/alternatives/sublist3r
Sublist3r is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
AI-powered attack surface management platform for cybersecurity monitoring
Platform for continuous attack surface discovery, monitoring, and remediation
Fast passive subdomain enumeration tool
A powerful tool for finding and exploiting subdomain takeover vulnerabilities
A simple web-based interface for subdomain enumeration using the subfinder tool.
A subdomain enumeration tool for bug hunting and pentesting
On our shortlist?
Sublist3r is not a pick on the current Best Attack Surface Management Solutions for Business.
Mandos MCP: ask about all 9,030 products.
Connect your AI
