Subdomain enumeration with Subfinder, HTTPX & GPT-4-Mini for security reconnaissance
Generates a wordlist of 1,000–15,000 subdomains created by an AI agent by correlating detected technologies and recurring patterns. Objective Assist security researchers, bug bounty hunters, and web pentesters in the reconnaissance phase by incorporating an AI agent that generates additional potential subdomains. This enables discovery of assets outside the scope of traditional scans and expands the analyzable attack surface. How it works 1. The user uploads a list of domains to sc
At a glance
Subdomain enumeration with Subfinder, HTTPX & GPT-4-Mini for security reconnaissance is a ready-made n8n workflow you import as a workflow JSON file — no build required. It connects OpenAI. It's free to download. Follow the 5-step import below to go live in minutes.
- Platform
- n8n
- Connects
- OpenAI
- Modules
- 34
- Price
- Free
- Version
- v1.0

About this workflow
Generates a wordlist of 1,000–15,000 subdomains created by an AI agent by correlating detected technologies and recurring patterns. Objective Assist security researchers, bug bounty hunters, and web pentesters in the reconnaissance phase by incorporating an AI agent that generates additional potential subdomains. This enables discovery of assets outside the scope of traditional scans and expands the analyzable attack surface. How it works 1. The user uploads a list of domains to scan (scope). 2. The workflow performs a passive, comprehensive scan using four sources (subfinder, assetfinder, crt.sh, Wayback Machine). 3. The scan results and detected technologies are passed to an AI agent. 4. The agent runs in a loop up to 20 iterations, generating new subdomains each pass (average output depends on input and model). 5. Generated subdomains are validated and deduplicated. Syntax is checked and availability is tested (host active / httpx). Requirements - SSH access with a root user and the following tools: 1. Subfinder 2. Assetfinder 3. HTTPX It is recommended to use a VPS with SSH because if the scope is very large the workflow will take a long time.
How to import this n8n workflow
- 1
Download the workflow JSON file after purchase.
- 2
Open n8n → click the menu → Import from File.
- 3
Select the downloaded JSON and import.
- 4
Set up credentials for each node that requires them.
- 5
Click Execute Workflow to test, then activate.
Setup guide
Setup guide included
Purchase to unlock the full step-by-step guide
Related N8n workflows
Transform cloud documentation into security baselines with OpenAI and GDrive
A very simple "Human in the Loop" email response system using AI and IMAP
Generate and Publish SEO-Optimized Blog Posts to WordPress
Automate AI video creation & multi-platform publishing with GPT-4, Veo 3.1 & Blotato
Generate replies in Telegram using OpenAI GPT-3 completions
Send messages using ChatGPT assistant and Z-API from a custom webhook
Generate SEO-optimized WordPress blogs with Gemini, Tavily & human review
Generate AI search–driven FAQ insights for SEO with SE Ranking and OpenAI GPT-4.1-mini
Reviews
No reviews yet
Be the first to buy and share your experience.
Leave a review
Sign in to share your experience with this workflow.
Create a free account to purchase workflows.
- JSON blueprint — instant download
- Setup guide PDF included
- 5 downloads · valid 30 days
- Works with n8n
Need help setting this up?
Book a 3-hour live setup session with an Agility consultant.
- Configure live on Google Meet / Zoom
- Free follow-up if workflow has defects
- Platform expert assigned to you