Subdomain Enumerator

这是面向安全从业者的自动化子域名枚举工具，核心功能是通过多种侦察技术，全面发现目标域名的活跃/非活跃子域名，返回子域名、IP及状态等信息，比手动发现更高效。典型场景包括授权渗透测试、红队范围定义、DevSecOps资产映射、合规内部资产发现。输入为含目标域名的JSON请求，输出为包含子域名列表、总数、枚举时长的JSON响应。

krishnakumarmahadevan-cmd

热度 48.69

最近更新 2026-05-11 17:34:32

分类：安全依赖：第三方 API应用场景：研究

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add subdomain-enumerator

Metadata

name: Subdomain Enumerator
description: Discovers and enumerates all subdomains associated with a target domain using deep reconnaissance techniques.

Overview

The Subdomain Enumerator is a powerful reconnaissance tool designed for security professionals, penetration testers, and bug bounty hunters who need to identify all active and inactive subdomains within a target domain. This API leverages multiple enumeration techniques to build a comprehensive map of an organization's subdomain infrastructure, which is critical for attack surface mapping and vulnerability assessment.

Subdomain enumeration is often the first step in a security assessment workflow. By discovering hidden or forgotten subdomains, security teams can identify overlooked assets that may contain vulnerabilities, outdated services, or misconfigurations. The Subdomain Enumerator automates this reconnaissance process, saving time and improving coverage compared to manual discovery methods.

This tool is ideal for security researchers conducting authorized penetration tests, red team operators performing scope definition, DevSecOps teams mapping their infrastructure, and organizations performing internal asset discovery for compliance purposes.

Usage

Sample Request

{
  "domain": "example.com"
}

Sample Response

{
  "domain": "example.com",
  "subdomains": [
    {
      "subdomain": "www.example.com",
      "ip_address": "93.184.216.34",
      "status": "active"
    },
    {
      "subdomain": "mail.example.com",
      "ip_address": "93.184.216.35",
      "status": "active"
    },
    {
      "subdomain": "staging.example.com",
      "ip_address": "192.0.2.1",
      "status": "active"
    },
    {
      "subdomain": "old-api.example.com",
      "ip_address": null,
      "status": "inactive"
    }
  ],
  "total_found": 4,
  "enumeration_time_ms": 5420
}

Endpoints

POST /enumerate-deep

Performs deep enumeration of subdomains for a specified domain using multiple reconnaissance techniques.

Method: POST
Path: /enumerate-deep

Request Parameters:

Name	Type	Required	Description
domain	string	Yes	The target domain to enumerate (e.g., `example.com`). Must be a valid domain name.

Response Schema:

The response returns a JSON object containing:

Field	Type	Description
domain	string	The target domain that was enumerated
subdomains	array	Array of discovered subdomain objects, each containing `subdomain`, `ip_address`, and `status` fields
total_found	integer	Total count of subdomains discovered
enumeration_time_ms	integer	Time taken to complete enumeration in milliseconds

HTTP Status Codes:

200 OK — Enumeration completed successfully
422 Unprocessable Entity — Validation error in request body (missing or invalid domain parameter)

Pricing

Plan	Calls/Day	Calls/Month	Price
Free	5	50	Free
Developer	20	500	$39/mo
Professional	200	5,000	$99/mo
Enterprise	100,000	1,000,000	$299/mo

About

ToolWeb.in — 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

References

Kong Route: https://api.mkkpro.com/security/subdomain-enumerator
API Docs: https://api.mkkpro.com:8006/docs