Nmmapper Subdomain finder API

Nmmapper providers the best subdomain finder tools online. We give our users real tool to run subdomain finder on different websites. There are a variety of tools that nmapper hosts online. What makes us unique among subdomain finder is the fact that we provider fresh data we don’t provide our users with already existing data like other services similar to ours.

Some of the subdomain finder supported by nmmapper

  • Sublist3r

  • DNScan

  • Anubis Subdomain finder

  • Amass subdomain finder

  • Nmap(using dns.brute.script)

  • Lepus Subdomain finder

  • Censys subdomain finder

  • Finddomain(Fastest)

We support all the above tools used to gather information about a particular domain. To use our API you will have to register Or you can contact us. And then generate API Key. Our API is not provided for free, you can either become a patreon or you can contact us and we see how to setup.

1
2
3
4
5
6
import requests
data = {"key":"xxxxx", "secret":"xxxxxx", "host":"nmmapper.com"}
headers = {'User-agent':"xxxx"} # User-agent is required
url="https://www.nmmapper.com/api/v1/subdomainfinder/"

res = request.post(url, data=data, headers=headers)

It’s that simple. We are also going to provide extra information that can be returned. For example we plan to offer the following which as optional that can be passed as extra.

  • asn ( This will mean that we resolve the subdomain and return IP Autonomous system number

  • resolve_ip ( Resolve the IP of each subdomain found)

  • server ( Detect each server running behind each subdomain)

As for now, the above optional are not yet supported. But when we support them it would mean that you can use them like this.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
import requests

data = {"key":"xxxxx", "secret":"xxxxxx",
"host":"nmmapper.com"
"asn":True, "resolve_ip":True, "server":True
}

headers = {'User-agent':"xxxx"} # User-agent is required
url="https://www.nmmapper.com/api/v1/subdomainfinder/"

res = request.post(url, data=data, headers=headers)

Resolving IP of discovered subdomains(Slow)

Nmmapper subdomain api supports resolving the ip of the discovered subdomain to do that just add the following.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
import requests

data = {"key":"xxxxx", "secret":"xxxxxx",
"host":"nmmapper.com", "resolve_ip":True # or False to not resolve IP
}

headers = {'User-agent':"xxxx"} # User-agent is required
url="https://www.nmmapper.com/api/v1/subdomainfinder/"

res = request.post(url, data=data, headers=headers)
res.json()

Please note that the IP resolution is quite slow, it can even be slower when the domains has lots of subdomains.

Detecting the server hosting the subdomain(Slow)

Our API also has a unique feature that of detecting the server behind the subdomain or hosting the subdomain

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
import requests

data = {"key":"xxxxx", "secret":"xxxxxx",
"host":"nmmapper.com", "server":True # or False to not detect server
}

headers = {'User-agent':"xxxx"} # User-agent is required
url="https://www.nmmapper.com/api/v1/subdomainfinder/"

res = request.post(url, data=data, headers=headers)
res.json()

Performing Autonomous System Number Lookup(Slow)

This is another unique feature in our API

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
import requests

data = {"key":"xxxxx", "secret":"xxxxxx",
"host":"nmmapper.com", "asn":True # or False to not perform ASN lookup
}

headers = {'User-agent':"xxxx"} # User-agent is required
url="https://www.nmmapper.com/api/v1/subdomainfinder/"

res = request.post(url, data=data, headers=headers)
res.json()