Skip to main content

Tools

The tools, as indicated by the name, are a collection of tools which perform specific requests on the hosts and DNS datasets and handle most of the search query complexity for you.

Subdomain enumeration​

You can perform a subdomain enumeration through the Profundis UI. The input field accepts domain names (e.g. somedomain.co.uk, example.com, etc). Note that you can also specify subdomains like api.domain.com if you expect to see other subdomains behind this value like sub.api.domain.com.

The results can be downloaded as TXT, JSON or CSV for further processing.

Subdomain enumeration cost is tiered: 1 credit per 100 subdomains for the first 300, then 1 credit per 300 beyond that, with a minimum of 1 credit per enumeration. For example, under 100 subdomains costs 1 credit, 300 costs 3 credits, and 600 costs 4 credits. Free accounts are capped at 300 subdomains per enumeration, so a full free-account enumeration costs 3 credits. See Credits. It can also be performed through our API.

Host details lookup​

This tool allows you to quickly get information about a specific host (click here to run a sample query). You can use it to:

  • Retrieve all the IP addresses which were ever used by this host.
  • See the ASN information about each of the IPs retrieved.
  • Discover other ports being exposed for this host.
  • Get all the other hosts which also use this IP.

This tool spends 1 credit per execution, plus 1 credit for each IP address it resolves and inspects (capped). See Credits.

ASN details lookup​

This tool allows you to identify the ASN related to a specific IP. You can try to run a sample query. An ASN details lookup costs 1 credit (see Credits).

Other tools​

Each of the following tools has its own dedicated documentation page:

Last updated on