macOS
Homebrewverified · 100%
brew install subfinderprovider-native install command
brew / rank 1412
Install subfinder with Homebrew
Subdomain discovery tool. Version 2.14.0 via Homebrew; verified 2026-07-26.
install
Additional install commands
overview
Package summary
Subdomain discovery tool
Project links
Commands and aliases
- subfinder
history
Project history and usage
subfinder is ProjectDiscovery's passive subdomain-enumeration CLI. The official docs describe it as a tool that finds valid subdomains using passive online sources, with a modular architecture optimized for speed, stealth, and integration into penetration-testing and bug-bounty workflows.
Project history
Official Git tags in the ProjectDiscovery repository show public releases beginning in 2018, with v2-era tags appearing by late 2019 and continued v2 releases through 2026. The README frames the project as a single-purpose tool: passive subdomain enumeration that respects source licenses and usage restrictions.
Adoption history
The install docs document Go, Homebrew, Docker, GitHub source builds, and downloadable binaries. The input package-manager facts additionally list Homebrew, DNF, Nix, and zypper, showing the tool's spread across security-tool packaging channels.
How it is used
Typical usage is `subfinder -d example.com` or feeding domain lists, choosing passive sources, writing JSONL or text output, and using stdin/stdout in larger reconnaissance pipelines. Its docs also emphasize post-install provider configuration because many passive sources require API keys.
Why package nerds care
subfinder matters in package-manager culture because ProjectDiscovery tools are often installed as a suite of composable Go CLIs. Packagers care about its static-binary-friendly Go distribution, Docker image, Homebrew formula, config and credential paths, and compatibility with automation-heavy security workflows.
Timeline
- 2018-05-01: Earliest official repository tags include v0.1 and v0.1.1.
- 2018-06-26: Official repository tag 1.0 created.
- 2019-12-05: Official repository tag v2.0 created.
- 2026-04-25: Official repository tag v2.14.0 created.
Related projects
- The official docs place subfinder within ProjectDiscovery's open-source security-tool family, alongside tools such as httpx, nuclei, naabu, katana, notify, uncover, and the ProjectDiscovery Tool Manager.
Sources
- Official git tag dates from https://github.com/projectdiscovery/subfinder.git
- https://docs.projectdiscovery.io/opensource/subfinder/install.md
- https://docs.projectdiscovery.io/opensource/subfinder/overview.md
- https://raw.githubusercontent.com/projectdiscovery/subfinder/dev/README.md
- input source_facts.package-manager
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$CONFIG/subfinder/config.yaml~/.config/subfinder/config.yaml
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
$CONFIG/subfinder/provider-config.yaml~/.config/subfinder/provider-config.yaml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
subfinder | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version2.14.0
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:subfinder |
|---|---|
| Version | 2.14.0 |
| Package manager | Homebrew |
| Homepage | https://projectdiscovery.io |
| Repository | https://github.com/projectdiscovery/subfinder |
| Last updated | 2026-07-26T04:03:47+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation