A subdomain enumeration tool.
Switch branches/tags
Nothing to show
Clone or download
Latest commit e4ea439 Jul 21, 2017
Failed to load latest commit information.
.vscode A vscode debugger config Jul 13, 2017
.gitignore first commit Jul 1, 2017
Dockerfile Update Dockerfile Jul 3, 2017
LICENSE first commit Jul 1, 2017
README.md Now call out -a as an explicit option Jul 2, 2017
main.go Add wildcard detection Jul 21, 2017
names.txt first commit Jul 1, 2017



This software is a subdomain enumeration tool.



dnssearch takes an input domain ( -domain parameter ) and a wordlist ( -wordlist parameter ), it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on the top level domain.

It supports a custom file extension ( -ext, default to php ) and other optional arguments:

Usage of ./dnssearch:
  -consumers int
        Number of concurrent consumers. (default 8)
  -domain string
        Base domain to start enumeration from.
  -wordlist string
        Wordlist file to use for enumeration. (default "names.txt")
  -a bool
        Lookup A records ( default true )
  -txt bool
        Lookup TXT records ( default false )
  -cname bool
        Show CNAME results ( default false )


go get github.com/evilsocket/dnssearch
cd dnssearch
go build -o dnssearch main.go

Compilation and use with Docker

docker build -t dnssearch .
docker run -it --rm dnssearch


This project is copyleft of Simone Margaritelli and released under the GPL 3 license.