Map subdomains for a bug-bounty target
Enumerate every subdomain with a public TLS certificate for a bug-bounty target. Pure passive CT-log recon, no contact with their infrastructure.
Input
Output fields
Sign up on Apify or log in
The Subdomain Finder: Bulk Certificate Transparency Search Actor is ready to run with the inputs already set for "Map subdomains for a bug-bounty target". Sign up or log in and you'll land in Apify Console with a copy of this exact task.
Start the "Map subdomains for a bug-bounty target" task
The Subdomain Finder: Bulk Certificate Transparency Search Actor will start running based on the input automatically. You can also change all the input fields, like items to look up, to match your specific use case.
Receive the "Map subdomains for a bug-bounty target" output
Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as query, found, and scraped at.
Integrate into your workflow
The final output is delivered in JSON, CSV, or Excel format, ready to be plugged into your workflow. You can also run the "Map subdomains for a bug-bounty target" task via API.
