-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
37 lines (34 loc) · 2 KB
/
.env.example
File metadata and controls
37 lines (34 loc) · 2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# ---------------------------------------------------------------------------
# Wordlists (bundled from SecLists – override with a host path via -v mount)
# ---------------------------------------------------------------------------
DEFAULT_DNS_WORDLIST=/opt/SecLists/Discovery/DNS/subdomains-top1million-5000.txt
DEFAULT_VHOST_WORDLIST=/opt/SecLists/Discovery/DNS/subdomains-top1million-5000.txt
# ---------------------------------------------------------------------------
# subfinder – optional config paths (read directly by subfinder from the environment)
# SUBFINDER_CONFIG overrides the default $CONFIG/subfinder/config.yaml
# SUBFINDER_PROVIDER_CONFIG overrides the default $CONFIG/subfinder/provider-config.yaml
# ---------------------------------------------------------------------------
SUBFINDER_CONFIG=
SUBFINDER_PROVIDER_CONFIG=
# ---------------------------------------------------------------------------
# findomain – optional API tokens (each unlocks an additional data source)
# Tokens are read directly from the environment by findomain.
# ---------------------------------------------------------------------------
# VirusTotal https://www.virustotal.com/gui/my-apikey
FINDOMAIN_VIRUSTOTAL_KEY=
# SecurityTrails https://securitytrails.com/app/account/credentials
FINDOMAIN_SECURITYTRAILS_KEY=
# Facebook Certificate Transparency https://developers.facebook.com/
FINDOMAIN_FACEBOOK_TOKEN=
# Spyse (now Intruder) https://app.intruder.io/
FINDOMAIN_SPYSE_TOKEN=
# CertSpotter https://sslmate.com/certspotter/api/
FINDOMAIN_CERTSPOTTER_TOKEN=
# ---------------------------------------------------------------------------
# dnsrecon – Shodan enrichment (optional)
# When SHODAN_API_KEY is set, subdomainenum passes --shodan --shodan-active
# to dnsrecon during passive and `all` modes. dnsrecon reads the key from
# the environment itself, so it is never forwarded on the command line.
# Get a key: https://account.shodan.io/
# ---------------------------------------------------------------------------
SHODAN_API_KEY=