(1) Subfinder API 환경 구성 알아보기

Subfinder 도구는 기본 설정으로도 주요 채널에서 유효한 서브도메인에 대한 정보를 수집할 수 있지만, 더 많은 정보를 얻기 위해서는 추가적인 API 설정이 필요합니다. Subfinder에서 지원하는 API 리스트는 아래와 같습니다.

• BeVigil, BinaryEdge, BufferOver, C99, Censys, CertSpotter, Chaos, Chinaz, DNSDB, Fofa, FullHunt, GitHub, Intelx, PassiveTotal, quake, Robtex, SecurityTrails, Shodan, ThreatBook, VirusTotal, WhoisXML API, ZoomEye API china - worldwide, dnsrepo, Hunter, Facebook, BuiltWith

API 리스트

Name	Price	Site
BeVigil	- Free (50 queries every month) - Pro ($50 / 1000 queries every month) - Business ($500 / 11000 queries every month) - Enterprise (Explore our Enterprise plan for customized query limits)	BeVigil Asset Explorer - a powerful OSINT tool
BinaryEdge	- Free (250 Queries (per month)) - Starter ($20 / 10,000 Queries (per month)) - Business ($500 / 55,000 Queries (per month)) - Enterprise (Custom)	BinaryEdge
BufferOver	- Free (100 requests/month) - Pro ($25 / 10,000 requests/month) - ULTRA ($250 / 100,000 requests/month)	tls.bufferover.run
C99	- $5/Month - $25/Year	C99 API's - C99's API Service
Censys	- Free (250 Monthly Queries) - Solo $62 (500 Monthly Queries) - Teams $449 (3,750 Monthly Queries)	Attack Surface Management and Threat Hunting Solutions | Censys
CertSpotter	- Small (100 single-hostname queries / hour) - Medium $50 (1000 single-hostname queries / hour) - Large $500 (10,000 single-hostname queries / hour)	Certificate Transparency Search API by SSLMate
Chaos	- Free	https://chaos.projectdiscovery.io/
DNSDB	- Free	https://www.domaintools.com/
Fofa	- Registered User (Query Credits 300/month) - Personal $25 (Query Credits 10,000/month) - Professional $119 (Query Credits 80,000/month) - Business $1,119 (Query Credits 900,000/month) - Corporate $5,400 (Query Credits Custom)	https://en.fofa.info
FullHunt	- COMMUNITY (100 searches per month) - ENTERPRISE $? (Unlimited)	https://fullhunt.io/
GitHub	- Free	https://fullhunt.io/
Intelx	- Free (50 /day) - Researcher € 2.500 (200 /day) - API € 2.500 (500 /day) - Identity Portal € 7.500 (500 /day) - Enterprise € 20.000 (5000+ /day)	Intelligence X (intelx.io)
quake	- Free (500datas) - Senior Members ¥299/year (5,000datas) - Lifetime Members ¥999/Lifetime (10,000datas) - Enterprise Customization ¥? (Customization)	quake.360.net/quake/
Robtex	- Free (it is limited in rate and amount of data returned) - Pro (ipquery 1 credit per query)	Robtex API
SecurityTrails	- Free (Queries per month 50) - Professional $500 (Queries per month 20,000) - Business $1500 (Queries per month 65,000) - Enterprise (Queries per month Flexible)	SecurityTrails: Data Security, Threat Hunting, and Attack Surface Management Solutions for Security Teams
Shodan	- Membership $49 (Queries per month 100) - Freelancer $69 (Queries per month 10,000) - Small Business $359 (Queries per month 200,000) - Corporate $1099 (Unlimited) - Enterprise (Unlimited)	Shodan Search Engine
VirusTotal	- Free  1. The Public API is limited to 500 requests per day and a rate of 4 requests per minute. 2. The Public API must not be used in commercial products or services. 3. The Public API must not be used in business workflows that do not contribute new files. 4. You are not allowed to register multiple accounts to overcome the aforementioned limitations.	https://www.virustotal.com/
WhoisXML API	- Free (Queries 500) - 1,000 Queries / $30.00 - 2,500 Queries / $60.00 - 5,000 Queries / $100.00 - 10,000 Queries / $160.00	WhoisXML API: #1 for Domain, WHOIS, IP, DNS & Threat Intelligence
dnsrepo	- $20	DNS Repo - A Domain / DNS / IP intelligence feed. (noc.org)
Facebook	- Free	https://developers.facebook.com/
BuiltWith	- Free - Basic $295 - Pro $495 - Team $995	BuiltWith Domain API

디폴트 API 활성화 리스트

alienvault, anubis은 기본적으로 활성화 되어있으며 나머지 리소스들은 API 환경을 설정해야 사용이 가능합니다.