assetfinder

assetfinder is a lightweight reconnaissance tool used to collect subdomains from public sources. It is commonly used as a starting point in recon workflows.

Use Cases

Initial reconnaissance phase
Subdomain discovery
Preparation for validation with httpx

Example Command

assetfinder --subs-only rosenthal.network

Example Output

blog.rosenthal.network
api.rosenthal.network
status.rosenthal.network

Notes

Strength: Fast and easy to use

Limitation: Not always complete

Next Step: Validate results using httpx

Ideal as a first step before deeper analysis.