Nmmapper Subdomain finder API

Nmmapper providers the best subdomain finder tools online. We give our users real tool to run subdomain finder on different websites. There are a variety of tools that nmapper hosts online. What makes us unique among subdomain finder is the fact that we provider fresh data we don’t provide our users with already existing data like other services similar to ours.

To use our API you will have to register Or you can contact us. And then generate API Key. Our API is not provided for free, you can either become a patreon or you can contact us and we see how to setup.

Performance

Because we run real tools, don’t expect instant results, this subdomain API is not for those who can’t wait longer(Otherwise don’t use it please). Expect waiting longer depending on the largeness of the domain being scanned. Each tool has it’s own performance that we can’t improve.

#
import requests
headers= {"X-Auth-Email":"youremail@something-here-re.com"}

# or if you want to use api X-AUTH-KEY and api X-AUTH-SECRET
headers = {"X-AUTH-SECRET":"", "X-AUTH-KEY":""}

url="https://api.nmmapper.com/api/v1/subdomainfinder/?domain=your-domain-here"
res = requests.get(url, headers=headers)
#

It’s that simple. We are also going to provide extra information that can be returned. For example we plan to offer the following which as optional that can be passed as extra.

  • asn ( This will mean that we resolve the subdomain and return IP Autonomous system number

  • resolve ( Resolve the IP of each subdomain found)

  • server ( Detect each server running behind each subdomain)

As for now, the above optional are not yet supported. But when we support them it would mean that you can use them like this.

import requests
headers= {"X-Auth-Email":"youremail@something-here-re.com"}

# or if you want to use api X-AUTH-KEY and api X-AUTH-SECRET
headers = {"X-AUTH-SECRET":"", "X-AUTH-KEY":""}

url="https://api.nmmapper.com/api/v1/subdomainfinder/?domain=your-domain&asn=True&resolve=True&server=True"
res = requests.get(url, headers=headers)

Resolving IP of discovered subdomains(Slow)

Nmmapper subdomain api supports resolving the ip of the discovered subdomain to do that just add the following.

import requests
headers= {"X-Auth-Email":"youremail@something-here-re.com"}

# or if you want to use api X-AUTH-KEY and api X-AUTH-SECRET
headers = {"X-AUTH-SECRET":"", "X-AUTH-KEY":""}

url="https://api.nmmapper.com/api/v1/subdomainfinder/?domain=your-domain-here&resolve=True"
res = requests.get(url, headers=headers)
res.json()

Please note that the IP resolution is quite slow, it can even be slower when the domains has lots of subdomains.

Detecting the server hosting the subdomain(Slow)

Our API also has a unique feature that of detecting the server behind the subdomain or hosting the subdomain

import requests
headers= {"X-Auth-Email":"youremail@something-here-re.com"}

# or if you want to use api X-AUTH-KEY and api X-AUTH-SECRET
headers = {"X-AUTH-SECRET":"", "X-AUTH-KEY":""}

url="https://api.nmmapper.com/api/v1/subdomainfinder/?domain=your-domain.com&server=True"
res = requests.get(url, headers=headers)
res.json()

Performing Autonomous System Number Lookup(Slow)

This is another unique feature in our API

import requests
headers= {"X-Auth-Email":"youremail@something-here-re.com"}

# or if you want to use api X-AUTH-KEY and api X-AUTH-SECRET
headers = {"X-AUTH-SECRET":"", "X-AUTH-KEY":""}

url="https://api.nmmapper.com/api/v1/subdomainfinder/?domain=domain-here.com&asn=True"
res = requests.get(url, headers=headers)
res.json()

Using Supported Tools Trough API

Here are tools that you can call through the API.

  • Anubis (NO Support for Server detection or IP Resolution)

&tool=anubis
  • Knockpy (NO Support for Server detection or IP Resolution)

&tool=knockpy
  • Lepus (NO Support for Server detection or IP Resolution)

&tool=lepus
  • Findomain (NO Support for Server detection or IP Resolution)

&tool=findomain