# Nodesub | Command-Line Tool For Finding Subdomains In Bug Bounty Programs

**URL:** <https://onehack.st/t/nodesub-command-line-tool-for-finding-subdomains-in-bug-bounty-programs/258720>\
**Category:** Tools & Scripts\
**Tags:** hacking, hosting\
**Created:** [October 9, 2023, 8:57pm UTC](https://onehack.st/t/nodesub-command-line-tool-for-finding-subdomains-in-bug-bounty-programs/258720 "2023-10-09T20:57:05Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Post date:** [October 9, 2023, 8:57pm UTC](https://onehack.st/t/nodesub-command-line-tool-for-finding-subdomains-in-bug-bounty-programs/258720/1 "2023-10-09T20:57:06Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/4/c/4c77713cf1747034ec36288b55be03358d209fe1.jpeg)

# [NODESUB

]([https://github.com/pikpikcu/nodesub#--nodesub--](https://github.com/pikpikcu/nodesub#--nodesub--))

Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization.

# [Features](https://github.com/pikpikcu/nodesub#features)

# [![nodesub](https://raw.githubusercontent.com/pikpikcu/nodesub/main/nodesub.png)

]([https://github.com/pikpikcu/nodesub#----](https://github.com/pikpikcu/nodesub#----))

- Perform subdomain enumeration using CIDR notation (Support input list).
- Perform subdomain enumeration using ASN (Support input list).
- Perform subdomain enumeration using a list of domains.

## [Installation](https://github.com/pikpikcu/nodesub#installation)

To install Nodesub, use the following command:

`npm install -g nodesub`

**NOTE:**

- Edit File `~/.config/nodesub/config.ini`

# [✔ Usage](https://github.com/pikpikcu/nodesub#%EF%B8%8F-usage)

```auto
nodesub -h

```

This will display help for the tool. Here are all the switches it supports.

```auto
Usage: nodesub [options]

Nodesub is a command-line tool for finding subdomains in bug bounty programs.

Options:
  -u, --url <domain> Main domain
  -l, --list <file> File with list of domains
  -c, --cidr <cidr/file> Perform subdomain enumeration using CIDR
  -a, --asn <asn/file> Perform subdomain enumeration using ASN
  -dns, --dnsenum Enable DNS Enumeration (if you enable this the enumeration process will be slow)
  -rl, --rate-limit <limit> Rate limit for DNS requests (requests per second) (default: "0")
  -ip, --ips Ekstrak IPs in Subdomain Resolved
  -wl, --wildcard Filter subdomains by wildcard DNS resolution Default:(False)
  -r, --recursive Enable recursive subdomain enumeration
  -p, --permutations Enable subdomain permutations
  -re,--resolver <file> File with list of resolvers
  -w, --wordlist <file> Wordlist file
  -pr, --proxy <proxy> Proxy URL
  -pa, --proxy-auth <username:password> Proxy authentication credentials
  -s, --size <size> Max old space size heap Default:(10048 MB)
  -d, --debug Show DNS resolution details
  -v, --verbose Enable verbose output
  -o, --output <file> Output file
  -f, --format <format> Output file format (txt, json, csv, pdf) (default: "txt")
  -h, --help display help for command

```

## [✔ Examples](https://github.com/pikpikcu/nodesub#%EF%B8%8F-examples)

- Enumerate subdomains for a single domain:

```auto
 nodesub -u example.com

```

- Enumerate subdomains for a list of domains from a file:

```auto
 nodesub -l domains.txt

```

- Perform subdomain enumeration using CIDR:

```auto
node nodesub.js -c 192.168.0.0/24 -o subdomains.txt

```

```auto
node nodesub.js -c CIDR.txt -o subdomains.txt

```

- Perform subdomain enumeration using ASN:

```auto
node nodesub.js -a AS12345 -o subdomains.txt

```

```auto
node nodesub.js -a ASN.txt -o subdomains.txt

```

- Enable recursive subdomain enumeration and output the results to a JSON file:

```auto
 nodesub -u example.com -r -o output.json -f json

```

## [Output](https://github.com/pikpikcu/nodesub#output)

The tool provides various output formats for the results, including:

- Text (txt)
- JSON (json)
- CSV (csv)
- PDF (pdf)

The output file contains the resolved subdomains, failed resolved subdomains, or all subdomains based on the options chosen.

### [✔ \*\*\*Contribution](https://github.com/pikpikcu/nodesub#%EF%B8%8F-contribution)

You can contribute in following ways:

- Give suggestions to make it better
- Fix issues & submit a pull request

## [License](https://github.com/pikpikcu/nodesub#license)

This project is licensed under the [MIT License](https://github.com/pikpikcu/nodesub/blob/main/LICENSE).

## GitHub:

> **[GitHub - pikpikcu/nodesub: Nodesub is a command-line tool for finding...](https://github.com/pikpikcu/nodesub)**
>
> Nodesub is a command-line tool for finding subdomains in bug bounty programs