subdomain enumeration with nmap & google's CT database

~ $
# nmap --script hostmap-crtsh.nse


Finds subdomains of a web server by querying Google's Certificate Transparency logs database ( The script will run against any target that has a name, either specified on the command line or obtained via reverse-DNS. Note : The same goal can be achieved by on the site

Shodan® All rights reserved