Repository navigation
dns
André Henrique edited this page Sep 13, 2026
·
2 revisions
dns
__ _______ _ _
\ \ / / ____| | | |
\ \ /\ / /| |__ | |__| |
\ \/ \/ / | __| | __ |
\ /\ / | | | | | |
\/ \/ |_| |_| |_|
WordlistXPL-Forge v1.2.0
Author: André Henrique (@mrhenrike)
Unified wordlist generation for pentest & red team
usage: wlf.py dns [-h] [-d DOMAIN] [--domain-list FILE] [-w WORDLIST]
[--words WORDS [WORDS ...]] [-t TEMPLATE]
[--template-file FILE] [--separator SEPARATOR]
[--match-regex REGEX] [--filter-regex REGEX] [--no-prefixes]
[--no-suffixes] [--enrich] [--clusterbomb]
[--payload KEY=FILE] [--dnscewl]
[--numeric-range NUMERIC_RANGE]
[--extension-swap TLD [TLD ...]] [--estimate] [-o OUTPUT]
options:
-h, --help show this help message and exit
-d, --domain DOMAIN Target domain (required unless --domain-list)
--domain-list FILE File with one domain per line (multi-domain mode)
-w, --wordlist WORDLIST
Words file
--words WORDS [WORDS ...]
Direct word list
-t, --template TEMPLATE
Inline template (e.g. dev-{word}.{domain})
--template-file FILE YAML file with permutation templates (alterx-
compatible)
--separator SEPARATOR
Custom separator between tokens (e.g. _ or .)
--match-regex REGEX Include only output matching this regex
--filter-regex REGEX Exclude output matching this regex
--no-prefixes
--no-suffixes
--enrich Extract tokens from input FQDNs to enrich payloads
(alterx -enrich)
--clusterbomb Use ClusterBomb mode with built-in alterx patterns and
payloads
--payload KEY=FILE Custom payload file (key=file, can repeat). Keys:
word, number, region
--dnscewl Add DNSCewl-style mutations (append/prepend/numeric-
range)
--numeric-range NUMERIC_RANGE
Numeric range for DNSCewl mutations (default: 10)
--extension-swap TLD [TLD ...]
Swap TLD extensions (e.g. com.au co.uk org)
--estimate Estimate output size without generating
-o, --output OUTPUT Output file
| Flag / arg | Default | Required | Description |
|---|---|---|---|
-d, --domain |
'' | no | Target domain (required unless --domain-list) |
--domain-list |
- | no | File with one domain per line (multi-domain mode) |
-w, --wordlist |
- | no | Words file |
--words |
- | no | Direct word list |
-t, --template |
- | no | Inline template (e.g. dev-{word}.{domain}) |
--template-file |
- | no | YAML file with permutation templates (alterx-compatible) |
--separator |
- | no | Custom separator between tokens (e.g. _ or .) |
--match-regex |
- | no | Include only output matching this regex |
--filter-regex |
- | no | Exclude output matching this regex |
--no-prefixes |
False | no | |
--no-suffixes |
False | no | |
--enrich |
False | no | Extract tokens from input FQDNs to enrich payloads (alterx -enrich) |
--clusterbomb |
False | no | Use ClusterBomb mode with built-in alterx patterns and payloads |
--payload |
- | no | Custom payload file (key=file, can repeat). Keys: word, number, region |
--dnscewl |
False | no | Add DNSCewl-style mutations (append/prepend/numeric-range) |
--numeric-range |
10 | no | Numeric range for DNSCewl mutations (default: 10) |
--extension-swap |
- | no | Swap TLD extensions (e.g. com.au co.uk org) |
--estimate |
False | no | Estimate output size without generating |
-o, --output |
- | no | Output file |
- Minimum:
wlf dns --help - Typical: see examples in the syntax block.
- Globals:
--min-len,--max-len,--limit,--threadswhen the command generates lists.
Stdout and/or -o / --output when the parser exposes it. Exit 0 on success; non-zero on invalid input.
- Valid: exit 0
- Invalid: exit 0
Examples use generic labels (BrandX, acme.example). This repo does not ship wlist_brasil.
WordlistXPL-Forge, member of the XPL-Forge suite. Author: Andre Henrique (mrhenrike) | Uniao Geek | https://uniaogeek.com.br/ | Authorized testing only.