Back to Tools
Passive Subdomain Finder
Passive Subdomain Finder
What is Passive Subdomain Enumeration?
Subdomain Finder uses passive OSINT techniques (Certificate Transparency logs) to discover hidden subdomains without directly communicating with the target server. This makes the scan completely silent and undetectable by IDS/IPS systems. Essential for reconnaissance, bug bounty hunting, and mapping attack surfaces.