OneForAll

Operator: Jing Ling and contributors

Local Python tool for finding subdomains from public sources, DNS checks and HTTP reachability checks.

Technical Infrastructure

Open website (external website)

Product

OneForAll, a locally run Python tool for collecting and checking subdomains.

Availability and source date

Active

As of: 16 October 2026.

No functionality test has been performed.

Use in OSINT research

Finds subdomains for a known domain and adds DNS and web information. Alongside existing sources, the tool uses active queries and wordlists.

Queries

InputResultResult type
Domain / websiteSubdomains found in certificates, DNS services, search engines and other sources.
Retrieved
Domain / websiteDNS resolution and HTTP reachability of discovered subdomains, including page titles and banners.
Technical check according to provider

Features

  • Collects subdomains from multiple public data sources.
  • Adds subdomain candidates using wordlists and name variants.
  • Checks DNS resolution and HTTP reachability.
  • Searches web pages and JavaScript for additional subdomains.
  • Removes duplicate results and exports TXT, CSV or JSON.

Categories

  • Technical Infrastructure
  • DNS

Coverage

Dataset

No proprietary regional dataset. The specified target sites and configured data sources determine the results.

Access

Installation and deployment

Locally installable

Command-line tool on your own computer, also available through Docker. The guide lists a graphical web interface only as a development plan.

Requirements

Local installation with Python 3 and the project dependencies, or execution as a Docker container. Some integrated sources require their own API keys.

Export

TXT, CSV and JSON; results are stored locally.

Provider

Jing Ling and contributors

Country of establishment

Unknown

Interfaces

No API, MCP or AI integration is documented.

Maintenance

Licence

GPL-3.0

Latest activity

Commit 05/2026

Stars

approx. 10,100 (as of 16 October 2026)

Usage note

The project guide restricts use to security assessments with sufficient authorisation.

Limitations

  • DNS, HTTP and wordlist queries contact the target infrastructure; the tool is not purely passive.
  • Coverage depends on available data sources and their API access.
  • The guide recommends the current repository version; the latest published release dates from July 2022.

Guides and practical reports

Sources

Report an error