# Sublist3r

Sublist3r is an External Attack Surface Management product. It runs on-premises. Pricing is free.

Sublist3r is a python tool for enumerating subdomains using OSINT and various search engines.

Checked October 2026.

## What is Sublist3r?

Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS. subbrute was integrated with Sublist3r to increase the possibility of finding more subdomains using bruteforce with an improved wordlist. The credit goes to TheRook who is the author of subbrute. Screenshots Installation git clone https://github.com/aboul3la/Sublist3r.git Recommended Python Version: Sublist3r currently supports Python 2 and Python 3. The recommended version for Python 2 is 2.7.x The recommended version for Python 3 is 3.4.x Dependencies: Sublist3r depends on the requests, dnspython and argparse python modules. These dependencies can be installed using the requirements file: Installation on Windows: c:\python27\python.exe -m pip install -r requirements.txt Installation on Linux sudo pip install -r requirements.txt Alternatively, each module can be install

Tags: Bug Bounty, OSINT, Subdomain Enumeration

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [External Attack Surface Management](https://cybersectools.com/categories/external-asm)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 10,855
- Website: github.com

## Where it ranks

Sublist3r is not a pick on the current [Best Attack Surface Management Solutions for Business](https://cybersectools.com/shortlists/best-attack-surface-solutions).

## Sublist3r FAQ

### What is Sublist3r?

Sublist3r is a product in the External Attack Surface Management category. It covers Bug Bounty, OSINT and Subdomain Enumeration.

### What is the pricing for Sublist3r?

Sublist3r is free. Download and setup instructions are at https://github.com/aboul3la/Sublist3r/.

### What are alternatives to Sublist3r?

Alternatives to Sublist3r listed on CybersecTools:

1. [ctlogs.dev](https://cybersectools.com/tools/ctlogsdev) - Fast Certificate Transparency search and JSON API for subdomain reconnaissance. (Commercial)
2. [MGM Security Partners recon me](https://cybersectools.com/tools/mgm-security-partners-recon-me) (Commercial)
3. [Detectify Platform](https://cybersectools.com/tools/detectify-platform) - Platform for external attack surface management and application security testing (Commercial)
4. [Halo Security Attack Surface Discovery](https://cybersectools.com/tools/halo-security-attack-surface-discovery) - Discovers and inventories internet-facing assets including subdomains, IPs, and apps. (Commercial)
5. [Intruder Discover Attack Surface](https://cybersectools.com/tools/intruder-discover-attack-surface) - Attack surface management platform for discovering and securing exposed assets (Commercial)

Compare all Sublist3r alternatives at [https://cybersectools.com/alternatives/sublist3r](https://cybersectools.com/alternatives/sublist3r)

### What deployment and organization size does Sublist3r fit?

Sublist3r is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Sublist3r with similar solutions

- [Sublist3r vs ctlogs.dev](https://cybersectools.com/compare/ctlogsdev-vs-sublist3r)
- [Sublist3r vs MGM Security Partners recon me](https://cybersectools.com/compare/mgm-security-partners-recon-me-vs-sublist3r)
- [Sublist3r vs Detectify Platform](https://cybersectools.com/compare/detectify-platform-vs-sublist3r)

All alternatives to Sublist3r: [/alternatives/sublist3r](https://cybersectools.com/alternatives/sublist3r)

---

Source: https://cybersectools.com/tools/sublist3r

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Sublist3r: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md