
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
subdox is a powerful CLI tool for managing and discovering domain information. With a range of commands, subdox simplifies domain discovery, API key management, and more.
To install subdox globally, use npm:
npm install -g subdox
Run subdox from your terminal:
subdox [options] [command]
-V, --version Output the version number-h, --help Display help for commandtest Test for CLI functionalityfind <domain> Find domain using a name filefind-st <domain> Find domain using SecurityTrailsadd-api-key <key> Add an API key (you can have multiple keys)remove-api-key <key> Remove an API keyreset-api-key Reset all your API keysall-api-key Show all API keyshelp [command] Display help for commandTest the CLI tool:
subdox test
First of all you need an api key from : https://securitytrails.com/app/account/credentials create account there, copy their api key and the follow the steps below
Add an API key:
subdox add-api-key API_KEY
Find a domain using SecurityTrails: (Recommended)
subdox find-st example.com
Find a domain using a name file: api key not needed (slow)
subdox find example.com
Remove an API key:
subdox remove-api-key your-api-key
Reset all API keys:
subdox reset-api-key
Show all API keys:
subdox all-api-key
You can add multiple api keys max quota is 50 per month per api key from free plan
For more details, check out the GitHub repository.
This project is licensed under the MIT License.
Author: Salman Hossain
email:
salmanhossain11222626@gmail.com
FAQs
An nodejs tool for finding subdomain using securitytrails.com
We found that subdox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.