macOS
Homebrewverified · 100%
brew install subfinderlocal Homebrew formula metadata
brew
Install subfinder with Homebrew, dnf, Nix, zypper
Subdomain discovery tool. Version 2.14.0 via Homebrew; verified 2026-06-15.
install
Additional install commands
Linux
Fedora dnfverified · 92%
sudo dnf install subfinderFedora Rawhide package metadata · subfinder · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#subfindernixpkgs package indexes · pkgs/by-name/su/subfinder/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install subfinderopenSUSE Tumbleweed package metadata · subfinder · source: download.opensuse.org
overview
Package summary
Subdomain discovery tool
Project links
Commands and aliases
- subfinder
history
Project history and usage
subfinder is ProjectDiscovery's passive subdomain-enumeration CLI. The official docs describe it as a tool that finds valid subdomains using passive online sources, with a modular architecture optimized for speed, stealth, and integration into penetration-testing and bug-bounty workflows.
Project history
Official Git tags in the ProjectDiscovery repository show public releases beginning in 2018, with v2-era tags appearing by late 2019 and continued v2 releases through 2026. The README frames the project as a single-purpose tool: passive subdomain enumeration that respects source licenses and usage restrictions.
Adoption history
The install docs document Go, Homebrew, Docker, GitHub source builds, and downloadable binaries. The input package-manager facts additionally list Homebrew, DNF, Nix, and zypper, showing the tool's spread across security-tool packaging channels.
How it is used
Typical usage is `subfinder -d example.com` or feeding domain lists, choosing passive sources, writing JSONL or text output, and using stdin/stdout in larger reconnaissance pipelines. Its docs also emphasize post-install provider configuration because many passive sources require API keys.
Why package nerds care
subfinder matters in package-manager culture because ProjectDiscovery tools are often installed as a suite of composable Go CLIs. Packagers care about its static-binary-friendly Go distribution, Docker image, Homebrew formula, config and credential paths, and compatibility with automation-heavy security workflows.
Timeline
- 2018-05-01: Earliest official repository tags include v0.1 and v0.1.1.
- 2018-06-26: Official repository tag 1.0 created.
- 2019-12-05: Official repository tag v2.0 created.
- 2026-04-25: Official repository tag v2.14.0 created.
Related projects
- The official docs place subfinder within ProjectDiscovery's open-source security-tool family, alongside tools such as httpx, nuclei, naabu, katana, notify, uncover, and the ProjectDiscovery Tool Manager.
Sources
- Official git tag dates from https://github.com/projectdiscovery/subfinder.git
- https://docs.projectdiscovery.io/opensource/subfinder/install.md
- https://docs.projectdiscovery.io/opensource/subfinder/overview.md
- https://raw.githubusercontent.com/projectdiscovery/subfinder/dev/README.md
- input source_facts.package-manager
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$CONFIG/subfinder/config.yaml~/.config/subfinder/config.yaml
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
$CONFIG/subfinder/provider-config.yaml~/.config/subfinder/provider-config.yaml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
subfinder | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-07
manager version2.14.0
manager updated2026-06-15
local dataok
upstreamcurrent
latest detectedv2.14.0
https://github.com/projectdiscovery/subfinder
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:subfinder |
|---|---|
| Version | 2.14.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/subfinder |
| Homepage | https://projectdiscovery.io |
| Repository | https://github.com/projectdiscovery/subfinder |
| Upstream docs | https://docs.projectdiscovery.io/opensource/subfinder/overview |
| License | MIT |
| Source archive | https://github.com/projectdiscovery/subfinder/archive/refs/tags/v2.14.0.tar.gz |
| Last updated | 2026-06-15T10:21:21-04:00 |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | subfinder |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
subfinder
nix profile install nixpkgs#subfinder- normalized package name match
- Matched by: Subfinder
dnf95%
subfinder 2.14.0-1.fc45
Fast passive subdomain enumeration tool
https://github.com/projectdiscovery/subfinder
sudo dnf install subfinder- License: 0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unlicense
- Category: Unspecified
- Architecture: x86_64
- Source Package: subfinder
- 3 dependencies
- 2 provides
- normalized package name match
- Matched by: Subfinder
zypper95%
subfinder 2.13.0-1.2
Fast passive subdomain enumeration tool
https://github.com/projectdiscovery/subfinder
sudo zypper install subfinder- License: MIT
- Category: Unspecified
- Architecture: x86_64
- Source Package: subfinder
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Subfinder
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment