/dnsmap.sh

Very fast script to enumerate DNS hostnames by brute force guessing of common subdomains.

Primary LanguageShellGNU General Public License v2.0GPL-2.0

dnsmap.sh

dnsmap.sh is a script enumerate DNS hostnames by brute force guessing of common subdomains.
It's faster than the original DNSMap by pagvac. and uses only 100~ lines of code.

dnsmap.sh

Why?

DNSMap is slow.

Installation

$ curl -o dnsmap -L https://git.io/dnsmap.sh
$ chmod +x dnsmap
$ ./dnsmap

Dependencies

  • bind-tools >= 9.0 (dig)

Usage

Usage ./dnsmap.sh <domain> <list> <record type> ...

dnsmap.sh - script to enumerate DNS hostnames

Examples:
 dnsmap.sh example.com list.txt A # IPv4
 dnsmap.sh example.com list.txt AAAA # IPv6
 dnsmap.sh example.com list.txt CNAME

Thanks

Daniel Miessler - Seclists repositiroy for the word list.

Copying

Written by bindh3x os@bindh3x.io
license