# osintverse-community/xsubfind3r

Finds a domain's subdomains passively from sources such as crt.sh, Certspotter, Wayback Machine and OTX

## Install and run

```sh
ot install osintverse-community/xsubfind3r
ot run osintverse-community/xsubfind3r d:example.com
```

The first `ot run` installs the tool after asking once. New to `ot`? See https://otinstaller.com/docs/getting-started.

From an AI agent, through ot's MCP server (`ot mcp`):

```
run_tool {"tool":"osintverse-community/xsubfind3r","inputs":{"domain":"example.com"}}
```

## Inputs

| Name | Type | Required | Default | Description |
| --- | --- | --- | --- | --- |
| `domain` | domain | yes |  |  |

## Outputs

Finds: subdomain.

## What a run does

- Does not contact the target.
- Does not collect personal data.
- Does not need an account.
- Does not notify the target.
- Usually takes about 60 seconds.
- Connects to the internet.

An agent needs the person's consent before running this tool, because it goes online. See https://otinstaller.com/docs/agents#consent.

## API keys

- `XSUBFIND3R_KEYS_GITHUB` (optional, free): GitHub token for the GitHub code search source Get one at https://github.com/settings/tokens
- `XSUBFIND3R_KEYS_VIRUSTOTAL` (optional, free tier): VirusTotal API key Get one at https://www.virustotal.com/gui/my-apikey
- `XSUBFIND3R_KEYS_SECURITYTRAILS` (optional, free tier): SecurityTrails API key Get one at https://securitytrails.com/app/account/credentials
- `XSUBFIND3R_KEYS_SHODAN` (optional, free tier): Shodan API key Get one at https://account.shodan.io
- `XSUBFIND3R_KEYS_URLSCAN` (optional, free tier): urlscan.io API key Get one at https://urlscan.io/user/profile/

Store a key with `ot keys set NAME`; it stays in the OS keychain.

## Trust

- Latest version: 1.1.2
- Signed: yes
- Verified publisher: yes
- Health: unknown
- Installs in the last 30 days: 0
- License: MIT
- Runtime: Docker image, pinned by digest
- Repository: https://github.com/osintverse-community/xsubfind3r
- Packaged by the community from a third-party tool

## Links

- Web page: https://otinstaller.com/osintverse-community/xsubfind3r
- JSON: https://api.otinstaller.com/v1/tools/osintverse-community/xsubfind3r
- README: https://github.com/osintverse-community/xsubfind3r#readme
- Homepage: https://github.com/hueristiq/xsubfind3r
- Security details: https://otinstaller.com/osintverse-community/xsubfind3r/security