https://cybertoolchain.io/tools/subfinder New releases and features in subfinder, tracked by The Cyber Toolchain. en Sat, 22 Aug 2026 18:49:03 GMT https://github.com/projectdiscovery/subfinder/releases/tag/v2.16.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.16.0 Sat, 22 Aug 2026 18:49:03 GMT subfinder v2.16.0 adds scanmalware passive source and enforces `-max-results` across paginating sources • Adds `-mr` / `-max-results` flag enforcement across all paginating sources, so result caps are now reliably honored when sources page through results. • Adds `scanmalware` as a new passive subdomain discovery source, available via `-s scanmalware`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.15.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.15.0 Wed, 05 Aug 2026 15:49:42 GMT subfinder v2.15.0 adds shodanct passive source, VirusTotal result-type filtering, and machine-readable source listing • Adds machine-readable source listing via `-ls -oJ` (outputs available sources as JSONL). • Adds `shodanct` as a new passive subdomain discovery source. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.14.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.14.0 Mon, 27 Apr 2026 02:29:39 GMT subfinder v2.14.0 adds the Sub.md passive source and removes the defunct Facebook/Meta CT integration. • Adds Sub.md as a new passive subdomain enumeration source. Breaking changes: • The Facebook source (Meta CT) has been removed; any automation, CI jobs, or saved source lists that reference this source must be updated to remove it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.13.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.13.0 Mon, 09 Mar 2026 21:00:30 GMT subfinder v2.13.0 adds URLScan.io as a new passive subdomain enumeration source. • Adds URLScan.io as a passive subdomain discovery source, expanding enumeration coverage without active probing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.12.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.12.0 Mon, 12 Jan 2026 08:26:40 GMT subfinder v2.12.0 adds Reconeer source, HackerTarget API key support, optional API keys, and request tracking in -stats. • Adds Reconeer as a new passive subdomain enumeration source. • Adds API key support for HackerTarget, enabling authenticated higher-rate queries. • Supports optional API keys for sources that can operate both authenticated and unauthenticated. • Extends `-stats` flag with per-source request tracking so practitioners can see exactly how many requests each source made. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.11.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.11.0 Fri, 19 Dec 2025 17:32:42 GMT subfinder v2.11.0 adds three new passive subdomain sources: Profundis, MerkleMap, and THC. • Adds Profundis as a passive subdomain enumeration source. • Adds MerkleMap as a passive subdomain enumeration source. • Adds THC as a passive subdomain enumeration source. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.10.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.10.0 Wed, 19 Nov 2025 02:34:46 GMT subfinder v2.10.0 adds three new passive sources, API key support for OnHype, and wildcard cert detection in JSON output. • Adds Windvane as a new passive subdomain enumeration source. • Adds DomainsProject as a new passive subdomain enumeration source. • Adds wildcard certificate detection surfaced in JSON output. • Adds real-time result support to the `ResultCallback` for enumerated subdomains in the library interface. Breaking changes: • The Hunter source has been removed; any provider configs or API keys referencing Hunter will no longer be used. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.9.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.9.0 Fri, 26 Sep 2025 10:26:56 GMT subfinder v2.9.0 adds Driftnet as a passive source and environment variable support in config files. • Adds Driftnet as a new passive subdomain enumeration source. • Supports environment variables inside subfinder config files, enabling secrets to be injected at runtime without hardcoding API keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.8.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.8.0 Fri, 20 Jun 2025 19:04:49 GMT subfinder v2.8.0 adds two new passive sources (pugrecon.com, RSECloud) and environment variable support for API keys. • Adds pugrecon.com as a passive subdomain enumeration source. • Adds RSECloud as a passive subdomain enumeration source. • Supports environment variables for supplying API keys, removing the need to store them in config files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.7.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.7.0 Thu, 27 Feb 2025 07:28:21 GMT subfinder v2.7.0 adds ThreatCrowd and DigitalYama as new passive subdomain enumeration sources. • Adds ThreatCrowd as a passive subdomain discovery source. • Adds DigitalYama as a passive subdomain discovery source. Breaking changes: • PassiveTotal source has been removed as the service no longer exists; any provider configs or workflows relying on it will no longer function. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.8 https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.8 Tue, 14 Jan 2025 09:51:22 GMT subfinder v2.6.8 adds HudsonRock as a passive source and improves SDK usability with source map returns. • Adds HudsonRock as a new passive subdomain enumeration source. • Enables the Subfinder SDK to return a source map, improving programmatic use of discovery results. Breaking changes: • The `columbus` source has been removed; any configs or scripts specifying it will no longer find it available. • The `subdomaincenter` source has been removed; any configs or scripts specifying it will no longer find it available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.7 https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.7 Fri, 25 Oct 2024 19:54:49 GMT subfinder v2.6.7 adds subdomaincenter source, comment support in input files, and a new GetStatistics function. • Adds subdomaincenter as a new passive subdomain enumeration source. • Supports comments in input files, allowing annotated domain lists. • Adds `GetStatistics` function to the library API for retrieving enumeration statistics. • Improves Netlas integration to use the download API for more complete results. • Improves rapiddns integration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.4 https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.4 Thu, 11 Jan 2024 19:00:24 GMT Subfinder v2.6.4 adds `-all` flag for crtsh and enables SecurityTrails pagination. • Adds `-all` option to the `crtsh` source to extend the result limit • Adds pagination support to the `SecurityTrails` source Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.3 https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.3 Tue, 12 Sep 2023 09:40:25 GMT Adds RedHuntLabs and Builtwith as new passive sources for subdomain enumeration • `RedHuntLabs` source added to passively discover subdomains. • `Builtwith` source added to passively discover subdomains. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.2 https://github.com/projectdiscovery/subfinder/releases/tag/v2.6.2 Sat, 12 Aug 2023 18:17:48 GMT Adds Facebook certificate transparency logs source and per-source rate limiting (`-rls`) • `subfinder -s facebook` adds the Facebook certificate transparency logs as a new enumeration source. • The `-rls` flag accepts a comma-separated list of `source=rate` pairs (e.g., `crtsh=10/s,shodan=1/s`) to enforce per-source rate limits. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.9 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.9 Tue, 30 May 2023 19:53:00 GMT Adds digitorus source support for subdomain extraction • Added support to extract additional subdomains from digitorus source Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.8 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.8 Mon, 01 May 2023 13:29:07 GMT Adds leakix as a new passive source for subdomain discovery • Integrates the leakix.net API as a new passive data source for enumerating subdomains. • Exposes `onresultcallback` in code to handle domain results asynchronously. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.7 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.7 Fri, 17 Mar 2023 16:15:20 GMT Adds `-update` flag for self-update and integrated version checking in subfinder v2.5.7 • `-update`: enables self-update capability within the CLI tool • Integrated version check alongside the update command Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.6 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.6 Wed, 22 Feb 2023 15:21:08 GMT Adds digitorus as a new subdomain enumeration source in subfinder v2.5.6 • Added **digitorus** support as new source Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.5 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.5 Thu, 17 Nov 2022 14:52:04 GMT Adds `hunter` and `recon.cloud` sources, callback function API, and dynamic year ranges for commoncrawl • `hunter` source • `recon.cloud` source Breaking changes: • `sonar` source removed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.4 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.4 Mon, 17 Oct 2022 20:25:02 GMT subfinder v2.5.4 adds subdomain match/filter support and three new passive sources (dnsrepo, bevigil, quake) • Adds subdomain match/filter support to refine which domains are collected • Adds dnsrepo source for passive subdomain enumeration • Adds bevigil source for passive subdomain enumeration • Adds quake source for passive subdomain enumeration Breaking changes: • The 'sublist3r' source is removed • The 'archiveis' source is removed • The 'threatcrowd' source is removed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.3 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.3 Wed, 03 Aug 2022 11:12:52 GMT Adds WhoisXML API support as a new subdomain discovery source. • Added WhoisXML API support • Removed bufferover API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.1 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.1 Mon, 04 Apr 2022 16:41:42 GMT subfinder v2.5.1 adds JSON output field and IP filtering for input files • `input` field added to JSON output (previously only source info was present) • Added option to filter IPs from the input file Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.0 https://github.com/projectdiscovery/subfinder/releases/tag/v2.5.0 Sun, 06 Mar 2022 19:07:07 GMT Adds C99, Zoomeye, Fullhunt, and non-commercial Bufferover API sources to subfinder v2.5.0 • Added `C99` source for subdomain discovery • Added `Zoomeye` API source for subdomain enumeration • Added `Fullhunt` API source for subdomain enumeration • Added support for non-commercial `Bufferover` API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/subfinder