适用对象
将此套件用于故障排查、迁移检查、基础设施研究和安全审查。
尝试搜索产品、目标、端点路径或 API 主题。
使用各种枚举技术发现域名的子域名。
将此套件用于故障排查、迁移检查、基础设施研究和安全审查。
需要收集观测到的公开子域名证据时选择。缺少某个名称不证明不存在子域名。
使用各种枚举技术发现域名的子域名。
集成前,请查看支持的操作、输入、输出、执行模式和响应限制。
4-5 需要身份验证。有关确切费用和按项计费,请查看操作参考。
使用文档化的操作来收集、评估、补充、验证、比较、保护或监测公开证据。
| 参数 | 类型 | 必需 |
|---|---|---|
| domain | string | 必需 |
| sources |
string
允许的值
ct
默认值
ct
|
可选 |
| verify |
string
允许的值
truefalse10yesno
默认值
false
|
可选 |
| include_wildcards |
string
允许的值
truefalse10yesno
默认值
false
|
可选 |
| limit |
integer
默认值
500
|
可选 |
| prefer_cache |
string
允许的值
truefalse10yesno
默认值
false
|
可选 |
| cursor | string | 可选 |
| 字段 | 类型 |
|---|---|
has_more |
boolean |
next_cursor |
string | null |
cache_age_s |
integer |
domain |
string |
subdomains[] |
object[] |
subdomains[] |
object |
subdomains[].name |
string |
subdomains[].source |
string |
subdomains[].first_seen |
string | null |
subdomains[].verified |
boolean |
subdomains[].dns_records |
object |
subdomains[].dns_records.A[] |
string[] |
subdomains[].dns_records.CNAME |
string | null |
wildcards[] |
object[] |
wildcards[] |
object |
wildcards[].pattern |
string |
wildcards[].source |
string |
wildcards[].first_seen |
string | null |
summary |
object |
summary.total_found |
integer |
summary.returned |
integer |
summary.verified_count |
integer |
summary.unverified_count |
integer |
summary.sources_used[] |
string[] |
summary.apex_included |
boolean |
summary.wildcard_suppressed_count |
integer |
summary.wildcard_returned_count |
integer |
intelligence_summary |
object |
intelligence_summary.data_sources[] |
string[] |
intelligence_summary.source_count |
integer |
intelligence_summary.cache_status |
string |
intelligence_summary.returned_count |
integer |
intelligence_summary.total_found |
integer |
intelligence_summary.truncated |
boolean |
intelligence_summary.limit |
integer |
intelligence_summary.verification_requested |
boolean |
intelligence_summary.include_wildcards |
boolean |
intelligence_summary.verified_count |
integer |
intelligence_summary.verified_ratio |
number | null |
intelligence_summary.live_dns_record_count |
integer |
intelligence_summary.apex_included |
boolean |
intelligence_summary.wildcard_suppressed_count |
integer |
intelligence_summary.wildcard_returned_count |
integer |
intelligence_summary.first_seen_oldest |
string | null |
intelligence_summary.first_seen_newest |
string | null |
intelligence_summary.warning_count |
integer |
warnings[] |
string[] |
meta |
object |
meta.query_time_ms |
integer |
meta.cached |
boolean |
meta.stale |
boolean |
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/subdomains?domain=example.com&sources=ct&verify=yes&include_wildcards=1&limit=500&prefer_cache=false"const response = await fetch("https://domscan.net/v1/subdomains?domain=example.com&sources=ct&verify=yes&include_wildcards=1&limit=500&prefer_cache=false", {
headers: { "X-API-Key": process.env.DOMSCAN_API_KEY },
});
const data = await response.json();
console.log(data);import os
import requests
response = requests.get(
"https://domscan.net/v1/subdomains?domain=example.com&sources=ct&verify=yes&include_wildcards=1&limit=500&prefer_cache=false",
headers={"X-API-Key": os.environ["DOMSCAN_API_KEY"]},
)
print(response.json())package main
import (
"fmt"
"io"
"net/http"
"os"
)
func main() {
req, err := http.NewRequest(http.MethodGet, "https://domscan.net/v1/subdomains?domain=example.com&sources=ct&verify=yes&include_wildcards=1&limit=500&prefer_cache=false", nil)
if err != nil {
panic(err)
}
req.Header.Set("X-API-Key", os.Getenv("DOMSCAN_API_KEY"))
resp, err := http.DefaultClient.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
data, err := io.ReadAll(resp.Body)
if err != nil {
panic(err)
}
fmt.Println(resp.Status, string(data))
}require "json"
require "net/http"
uri = URI("https://domscan.net/v1/subdomains?domain=example.com&sources=ct&verify=yes&include_wildcards=1&limit=500&prefer_cache=false")
request = Net::HTTP::Get.new(uri)
request["X-API-Key"] = ENV.fetch("DOMSCAN_API_KEY")
response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
http.request(request)
end
puts JSON.pretty_generate(JSON.parse(response.body)){
"domain": "example.com",
"subdomains": [
{
"name": "api.example.com",
"source": "crtsh",
"first_seen": "2025-01-15T00:00:00Z",
"verified": true,
"dns_records": {
"A": [
"example"
],
"CNAME": "example"
}
}
],
"summary": {
"total_found": 1,
"returned": 1,
"verified_count": 1,
"unverified_count": 1,
"sources_used": [
"ct"
],
"apex_included": false,
"wildcard_suppressed_count": 1,
"wildcard_returned_count": 1
},
"intelligence_summary": {
"data_sources": [
"ct"
],
"source_count": 1,
"cache_status": "live",
"returned_count": 1,
"total_found": 1,
"truncated": false,
"limit": 1,
"verification_requested": false,
"include_wildcards": false,
"verified_count": 1,
"verified_ratio": 0.5,
"live_dns_record_count": 1,
"apex_included": false,
"wildcard_suppressed_count": 1,
"wildcard_returned_count": 1,
"first_seen_oldest": "example",
"first_seen_newest": "example",
"warning_count": 1
},
"meta": {
"query_time_ms": 1,
"cached": false,
"stale": false
},
"has_more": false,
"next_cursor": "example",
"cache_age_s": 1,
"wildcards": [
{
"pattern": "*.example.com",
"source": "ct",
"first_seen": "example"
}
],
"warnings": [
"example"
]
}
200 成功202 已接受400 请求错误401 未授权402 需要付款429 请求过多503 服务不可用504 网关超时使用 子域名查找器 的 API 参考来查看参数、响应字段、示例、状态码和支持的操作模式。
未知或部分结果表示无法完全确定所请求的证据。在后续决策中保留结果状态、置信度、新鲜度和限制信息。
费用取决于操作和执行模式。有关当前积分费用、身份验证要求和按项规则,请查看端点参考。
被这些公司的人员使用