Overview
This node integrates with Subfinder, a tool designed for subdomain discovery and enumeration. It allows users to find subdomains of given domains by querying various sources and applying filters and options to customize the search. This is particularly useful in security assessments, penetration testing, and reconnaissance tasks where discovering all subdomains of a target domain is critical.
Typical use cases include:
- Security researchers enumerating subdomains to identify potential attack surfaces.
- Automated workflows that gather domain intelligence for monitoring or alerting.
- Integrations in SOAR (Security Orchestration, Automation, and Response) platforms to enrich domain data.
The node runs Subfinder commands with user-specified options and parses the JSON output to provide structured results containing discovered subdomains.
Properties
| Name | Meaning |
|---|---|
| Only Success | Boolean flag to indicate whether to output only successful results. |
| Options | Collection of customizable command-line options for Subfinder, including: - Source: Select specific sources for discovery, recursive sources, all sources, or exclude certain sources. - Filter: Match or filter subdomains by name or list. - Rate Limit: Control HTTP request rate limits globally or per provider, and concurrency settings. - Output: Include additional output details like source collection or IP addresses. - Configuration: Various flags such as active-only results, config file paths, proxy settings, resolvers, and exclusions. - Optimization: Timeout and maximum time settings for the enumeration process. |
| Advanced Config | Advanced fixed collection allowing multiple entries for: - Environment variables (key-value pairs). - Files with name and content. - Collect files by name. Useful for advanced customization and environment setup. |
| Debug Mode | Boolean flag to enable debug mode, which provides more detailed information in the node's input and output for troubleshooting purposes. |
Output
The node outputs JSON data representing the discovered subdomains for each input domain. The structure includes:
input: The original domain input.host: Each discovered subdomain associated with the input domain.
If enabled via options, the output can also include:
- Source information indicating which data source provided the subdomain.
- Host IP addresses for active subdomains.
Binary data output is not indicated in the code; the node primarily outputs structured JSON results.
Dependencies
- Requires Subfinder CLI installed and accessible in the environment where n8n runs.
- No direct API keys or external service credentials are managed by this node; however, some options allow specifying proxy servers or configuration files that may require appropriate access.
- The node uses internal runner infrastructure to execute Subfinder commands and parse their output.
Troubleshooting
Common Issues:
- Subfinder CLI not installed or not in PATH: The node will fail to run commands.
- Incorrect option values or malformed inputs may cause Subfinder to error out.
- Network issues or rate limiting from data sources could result in incomplete results.
- Proxy misconfiguration if using the proxy option.
Error Messages:
- Errors related to command execution usually stem from missing binaries or invalid parameters.
- JSON parsing errors might occur if Subfinder outputs unexpected data; enabling debug mode can help diagnose.
Resolutions:
- Ensure Subfinder is properly installed and accessible.
- Validate all input options and configurations.
- Use debug mode to get detailed logs.
- Check network connectivity and proxy settings.
Links and References
- Subfinder GitHub Repository — Official source and documentation for Subfinder.