A simple and fast sub domain brute tool for pentesters. It can rearch as fast as 1000 DNS queries per second.
这个脚本的主要目标是发现其他工具无法探测到的域名, 如Google，aizhan，fofa。高频扫描每秒DNS请求数可超过1000次。
##Change Log (Jan 10, 2017)
- Add support for extremely huge dict like all 6-letter sub names
-t THREADScould be set, 200 by default
##Change Log (Nov 9, 2016)
- Time performance optimization
- Placeholder {alphnum} {alpha} {num} could be used in Names File
##Dependencies First you need to install dnspython to do DNS query
pip install dnspython
##Usage
Usage: subDomainsBrute.py [options] target.com
Options:
--version show program's version number and exit
-h, --help show this help message and exit
-f FILE A file contains new line delimited subs, default is
subnames.txt.
--full Full scan, NAMES FILE subnames_full.txt will be used
to brute
-i, --ignore-intranet
Ignore domains pointed to private IPs
-t THREADS, --threads=THREADS
Num of scan threads, 200 by default
-o OUTPUT, --output=OUTPUT
Output file name. default is {target}.txt
##Screenshot
Output file could be like: https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_youku.com_full.txt
LiJieJie my[at]lijiejie.com (Blog)
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent