3subs is a CLI tool that automates subdomain enumeration using subfinder, assetfinder, and findomain. It merges and deduplicates results from all three tools for comprehensive coverage.
- Runs subfinder, assetfinder, and findomain automatically
- Merges and deduplicates subdomain results
- Simple CLI with progress banners
- Custom output filename with
-oflag
- Go 1.18+
- macOS or Linux
- subfinder, assetfinder, and findomain installed and available in your PATH
You can install 3subs directly using Go (the binary will be named 3subs and typically placed in your $GOPATH/bin):
go install github.com/0x1Jar/3subs/cmd/3subs@latestOr clone this repository and build the binary manually:
git clone https://github.com/0x1Jar/3subs.git
cd 3subs
go build -o 3subs ./cmdAfter building the binary, you should move the 3subs binary to a directory that is in your $PATH for easy access:
sudo mv 3subs /usr/local/bin/You can use the provided script to install all required tools (subfinder, assetfinder, findomain) on macOS/Linux:
zsh install_tools.sh- This will install
subfinderandassetfinderto$HOME/go/bin(ensure this is in your PATH). - On macOS,
findomainis installed via Homebrew to/usr/local/bin. - On Linux,
findomainis downloaded and placed in/usr/local/bin.
- If you get a
command not founderror for any tool, ensure$HOME/go/binand/usr/local/binare in yourPATH. - For Go tools: Add this to your shell profile (e.g.,
~/.zshrcor~/.bashrc):export PATH="$HOME/go/bin:$PATH"
- For Homebrew (macOS):
export PATH="/usr/local/bin:$PATH"
3subs -d example.com -o myresults.txt- Replace
example.comwith your target domain. - Use
-oto specify a custom output file for merged results (default:subdomains_all.txt). - The results will be saved in:
subdomains_subfinder.txtsubdomains_assetfinder.txtsubdomain_find.txt- Merged and deduplicated results will be saved in your custom output file (default:
subdomains_all.txt).
============================================
3subs - Subdomain Enumeration Automation
By: 0x1Jar (github.com/0x1Jar)
This tool automates subdomain enumeration
using subfinder, assetfinder, and findomain.
============================================
[~] Starting subdomain enumeration for: example.com
[>] Running subfinder...
[√] subfinder done.
[>] Running assetfinder...
[√] assetfinder done.
[>] Running findomain...
[√] findomain done.
[>] Merging results and removing duplicates...
[√] Merge complete.
[✓] Subdomain enumeration completed in 2.3s.
MIT