Improvements:

• Tune the DNS resolver configuration and DNS servers handling/load distribution so that queries take less time. It's a notable performance improvement, especially in larger DNS lookups. https://github.com/Findomain/Findomain/commit/7721ff72466258a5a535f2190f1a97206e5eb2bb

New:

• Add an option to validate subdomains ensuring that they are valid domain names, it does not perform any resolution tasks. The usage is: findomain --validate -f subdomains_file.txt -u valid_subdomains.txt. https://github.com/Findomain/Findomain/commit/e9bf92b24b79d016fb43a6014a5d5fbfc1bf48af

Optimizations:

• Simplify webhooks checking logic. https://github.com/Findomain/Findomain/commit/c6eb2f94f4c4aeaf4b4b4b138a9adbdc3cf9ef24
• Add targets/subdomains parsing. https://github.com/Findomain/Findomain/commit/c55fe4efea50c10b68e42b735c1262d1cecadcf2

Miscellaneous:

• Bump dependencies. https://github.com/Findomain/Findomain/commit/b219769b84fa4ec79fbb3c9e08c14dd7520c7a7a https://github.com/Findomain/Findomain/commit/2abd971ae96b3907aac23ada0d3279921707f6fc

Fixes

• Fix --exclude when using multiple matching patterns. https://github.com/Findomain/Findomain/commit/f2c1d07a9bf5c71fdd36093b1956a940e4647e5c
• Fix openssl-sys build wich is not compatible resolver = "2" which is the new default in Rust 2021. https://github.com/Findomain/Findomain/commit/0400b0528ce47b2c025037b3e51d3bd2f0b0b71c

Breaking changes for builds only

• Update to new Rust edition 2021. https://github.com/Findomain/Findomain/commit/4fa4abc4d74fe2b31e060b19bc1da3c2852cc503
• Add minimum supported rust-version (1.56). https://github.com/Findomain/Findomain/commit/acf45b846840b5430b4b78be5d3a8ee3309cef13

New:

• Add support for the --external-subdomains flag, it's basically a built-in discovery and import process for amass and subfinder subdomains, install the tools and run Findomain with the flag, it will take care of everything. Example: findomain -t google.com -r --external-subdomains will run Amass and Subfinder, process the output, and return only the resolved and non-wildcards subdomains. https://github.com/Findomain/Findomain/commit/3567bc2a4a082f46070288ae9e52546681016575

Special thanks to the Amass and Subfinder devs.

Misc:

• Update dependencies. https://github.com/Findomain/Findomain/commit/e0bd0a54f38684d33e8966ebc13ae211954002af
• Fix clippy warnings. https://github.com/Findomain/Findomain/commit/d8bd601c997eff59a142470e2a6b5a80fef633fe

NEW:

• Add support for --no-resolve flag. This flag can be used when you don't want that findomain performs resolving tasks while using --as-resolver/-x and taking screenshots. This allows you to pass URLs directly in the format https:// or http:// (probably checked with other tools) and use findomain simply to take screenshots. https://github.com/Findomain/Findomain/commit/bbcdb93420e50444022e5feec4ddcc7d9d4201da
• Use a Resolver with multiple nameserver IPs instead of creating multiple Resolver instances. This represents a huge increase in performance and better resources management. https://github.com/Findomain/Findomain/commit/5a3019a8bfe9fe8be2c3e8add89e4e71cc5d0547

MISC:

• Add debugging config. https://github.com/Findomain/Findomain/commit/5f85e43670691795d1d316e70085af8e31023b24

• Fix issue while writing screenshots. Because some special characters were added to the file name, this did not allow them to be written. https://github.com/Findomain/Findomain/commit/aad60ebe0786f84b71101eb3cffc8704e7ca0623

NEW:

• Respect --rate-limit setting when reading from stdin. https://github.com/Findomain/Findomain/commit/08528b4fb0541829c1d9b96bb8bbac201fb969e7
• Apply the same logic as if we are reading from a file when using --stdin for other operations. https://github.com/Findomain/Findomain/commit/08528b4fb0541829c1d9b96bb8bbac201fb969e7
• Add support for taking screenshots of hosts in the format HOST:PORT. https://github.com/Findomain/Findomain/commit/04544997ca470d6bfd55909e0fc0422c1e843ec0
• Only appends http:// and https:// if the host doesn't start with this. This allows the user to take screenshots of previously formatted URLs. https://github.com/Findomain/Findomain/commit/ce77eae9fc9d7ed05fc76ebbbb11784edc434893

MISC:

• Give a better error if the targets file is empty or all targets are invalid. Fixes #143. https://github.com/Findomain/Findomain/commit/1a8ba850ce14e739e9b4ad083f204aed05367f06
• Update dependencies. https://github.com/Findomain/Findomain/commit/e0c1148e2fedb4ed0a44bf6f3254a271847d4723

• Remove unneeded requires that cause issues with the new --stdin option. https://github.com/Findomain/Findomain/commit/f65d70209dd4f8c4d7fac0f14cbe907b9b79f2fd

New:

• Add randomization option for targets. Fixes #142. https://github.com/Findomain/Findomain/commit/32b77215bbad7846cf6c39daa02adef663fc95be
• Add support for multiple APIKeys while randomizing them in the requests. Fixes #141. https://github.com/Findomain/Findomain/commit/c3d928aacef39e30b1e76c8e19d4b6dc3404a9dc
• Remove all threads workarounds. https://github.com/Findomain/Findomain/commit/f374ce7125b2ea529a48216d45e6953e03ff0de2
• Updated config files to match all the available options. https://github.com/Findomain/Findomain/commit/b46dfbfe11f4cb16af2182ef360101c69f8440f0

Important:

• Crates.io installation is now unsupported and all versions there have been yanked, DO NOT INSTALL using cargo install command.

Misc:

• Bump dependencies to latest version + fix code to match new APIs. https://github.com/Findomain/Findomain/commit/96fbdd30510b9b79615a6478e8055c60fc231559
• Fix clippy warnings. https://github.com/Findomain/Findomain/commit/7dd2432011b704c276d874d6850e9b869aa00ca7
• Automatic indentation by YAML extension. https://github.com/Findomain/Findomain/commit/53a63173d28d6c9d9dc54439d78fb4d95813e369

NEW:

• Add support for reading user agents from file. https://github.com/Findomain/Findomain/commit/78b28503db06edb7f6f615a6ba1f2acdb810d476
• Add ability to read targets from stdin. https://github.com/Findomain/Findomain/commit/5fdbde81b7f2f708ebdf55b1fe3158a70ba91c60
• Add certspotter api key support. https://github.com/Findomain/Findomain/commit/5c07857d793913bbe61e34b169cb0eb5a264ae27

MISC:

• Use choose() method from rand. https://github.com/Findomain/Findomain/commit/19e82255e10f429bf0ce46bd4250217ba61c3001
• Optimize binaries size. https://github.com/Findomain/Findomain/commit/871db1914058b2602d388d1df3b0701330846350 https://github.com/Findomain/Findomain/commit/354f10bf4728b2b0c2cab44382441b0764b38a44
• Docs: fix broken links. https://github.com/Findomain/Findomain/commit/5ca8d2da150bb02fd3b2972e8a14e1752efb8b5a

• Add error handling when we can't get Chromium instance. https://github.com/Findomain/Findomain/commit/0b71a164752c206be891bed574d74c9305ee836a
• Add check for Chrome/Chromium when taking screenshots. https://github.com/Findomain/Findomain/commit/533603da3b7eac8367cba4a7c56ebc0542893dc8

• Fix an issue while updating the database schema from previous Findomain public versions (#127).

Context: As the development of the plus version was done independently, I did not take into account the update of the database schema of the free version that there was with the new version (which was taken from the code of the plus version).

It's an special release. We have added a lot of features from our private Findomain Plus version. This would not be possible without the support of our paid users, if you want to contribute to the project while receiving a benefit, consider purchasing one of our recon/vulnerability discovery plans here.

PLEASE USE VERSION 3.0.1 IF YOU WERE USING FINDOMAIN PREVIOUSLY: https://github.com/Findomain/Findomain/releases/tag/3.0.1

Changes:

• Add option to filter/exclude subdomains by specific strings.
• Add support for checkign HTTP status and push to webhook.
• Add optional flag to do a light monitoring.
• Add support for port scanning using a custom open ports checker.
• Add support for custom User Agent.
• Add rate limit support.
• Added root_domain to database.
• Add support for pushing to database if the webhook timeout.
• Add support for webarchive, c99, ctsearch.
• Add support for skipping monitoring mode while pushing to database.
• Add support for custom DNS resolvers.
• Added job name support.
• Add screenshots support.
• Add support for custom http-timeout.

Misc:

• Force all targets to be lowercase.
• Change database structure.
• Add ï and ¼ to the list of special characters.
• Exclude subdomains containing non ascii characters.

• Update dependencies to build in the new Apple's M1 chip.
• Update resolvers to only use well-known ones.

• Update resolvers. https://github.com/Edu4rdSHL/findomain/commit/8f88a3dc0613b38361362e0ffa58a7c1f140d409

• Fix issue with bruteforce option. https://github.com/Edu4rdSHL/findomain/commit/4dc0bd93b6952c8d40b3b16c836641098eaf406f

• Minor fixes and improvements.
• Linux builds now have static libc so it's guaranteed they will work in any Linux distro without caring of the libc version installed (Fix GLIBC NOT FOUND errors).

• Add subdomains starting with *. to scope sanitizing them (the 2.1.0 had an problem causing unwanted data being sent to output and database, the release was deleted). Fix: https://github.com/Edu4rdSHL/findomain/commit/f592c68a60365cc6c2031430205e3007aefdfd28

New:

• Asynchronous resolver engine. https://github.com/Edu4rdSHL/findomain/commit/911e341163cc3db3f169f31973b8cab0fa379a60

Misc:

• Update dependencies. https://github.com/Edu4rdSHL/findomain/commit/0c4372d9ac6df382dbdf3249a7774c13d712065a
• Remove compiler warnings. https://github.com/Edu4rdSHL/findomain/commit/1690f5b0b0a07504458cb75841f22c2506646991

• Add support to exclude sources. Command line option: --exclude-sources archiveorg c99 crtsh etc, config file: exclude_sources = "archiveorg c99 crtsh etc". Note: you can exclude all sources, this will help in migration process. https://github.com/Edu4rdSHL/findomain/commit/b88c1c989352de5dd9c37b65d0c95a95e9955ae2
• Convert all subdomains to lowercase. Some APIs return bot lowercase and uppercase mixed subdomains. https://github.com/Edu4rdSHL/findomain/commit/812f19a513d02edf1a7b8c2f79fa38c74cdbd3b9

Recommended read: https://findomain.app/findomain-advanced-automated-and-modern-recon/