SubSL is a powerful subdomain enumeration and monitoring tool featuring a live web dashboard for tracking scan progress in real-time.
- OSINT-based subdomain enumeration (e.g. crt.sh, AlienVault, HackerTarget)
- Bruteforce subdomain discovery
- Real-time DNS resolution & HTTP reachability checks
- Web dashboard with live stats and logs via WebSocket
- Optional Shodan integration for more insights
- Python 3.9+
- Linux recommended (Debian, Kali, Arch tested)
git clone https://github.com/sb3lr/subsl.git
cd subsl
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txtCreate a .env file in the root directory:
SHODAN_API_KEY=your_shodan_api_key
GITHUB_TOKEN=your_github_token
SECURITYTRAILS_API_KEY=your_securitytrails_keypython3 subSL.py example.compython3 subSL.py example.com --webOpen http://localhost:8000 in your browser to monitor.
--web: Enable web dashboard--no-brute: Disable bruteforce subdomain guessing--wordlist PATH: Custom wordlist for bruteforce
- Port 8000 must be free.
- If WebSocket live updates don’t work, install proper backends:
pip install 'uvicorn[standard]'
MIT © 2025 sb3lr