A simple and fast sub domain brute tool for pentesters. It can rearch as fast as 1000 DNS queries per second.
这个脚本的主要目标是发现其他工具无法探测到的域名, 如Google,aizhan,fofa。高频扫描每秒DNS请求数可超过1000次。
##Change Log (Oct 26, 2016)
- Work with subbrute's DNS Server List, thanks for TheRook's excellent work.
- Time performance optimization
- Placeholder {alphnum} {alpha} {num} could be used in Names File
##Dependencies First you need to install dnspython to do DNS query
pip install dnspython
##Usage
Usage: subDomainsBrute.py [options] target.com
Options:
--version show program's version number and exit
-h, --help show this help message and exit
--full Full scan, a large NAMES FILE will be used during the
scan
-i, --ignore-intranet
Ignore domains pointed to private IPs
-o OUTPUT, --output=OUTPUT
Output file name. default is {target}.txt
Output file could be like: https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_youku.com_full.txt
LiJieJie my[at]lijiejie.com (Blog)