This Python script is designed to enumerate subdomains for a given domain by performing DNS requests and reverse DNS lookups. The script reads a list of potential subdomains from a file and attempts to resolve them, printing out the results.

Prerequisites

Ensure you have the following Python libraries installed:

• socket
• dnspython (which includes dns and dns.resolver)

You can install dnspython using pip if you don't have it installed already:

pip install dnspython

Usage

To run the script, use the following command:

python3 dnsExploring.py <domain name>

Replace <domain name> with the domain you want to search subdomains for

Example

python dnsExploring.py example.com

Files

• dnsExploring.py: The main script file.
• top10subs.txt: A text file containing a list of 10 common subdomains to check. Each subdomain should be on a new line.
• top100subs.txt: A text file containing a list of 100 common subdomains to check. Each subdomain should be on a new line.
• top10000subs.txt: A text file containing a list of 10,000 common subdomains to check. Each subdomain should be on a new line.

Note

You can replace the name of the subdomain file used in the script by changing the value of the variable d. By default, the script uses top100subs.txt. To use a different file, modify the d variable at the beginning of the script accordingly.

For example, to use top10subs.txt:

  d = "top10subs.txt"

Screenshot