Hacking Thread Name: Active Subdomain Discovery with DNS Brute Force

[Tess]

This tool accurately uses both static and dynamic modes for subdomain brute forcing and stores it in its database (optional).

• Static
• Dynamic
  • Single subdomain
  • List of subdomains
• Data Storage
  • MongoDB

Requirement

• shuffledns
• massdns
• altdns
• MongoDB
• Python 3

Installation

Download The file and extract it
pip install -r requirements.txt
cat script.txt >> ~/.zshrc OR cat script.txt >> ~/.bashrc
source ~/.zshrc OR source ~/.bashrc

Uasge
1. Static Brute Force

• Command:

  • python3 main.py --mode static -w words.txt -d target.com --path-massdns /usr/bin/massdns -r ~/resolvers

2. Dynamic Brute Force

• On the list of subdomains:

  • python3 main.py --mode dynamic --list-subs target-subs.txt -w words-merged.txt -d target.com -pm /usr/bin/massdns -r ~/resolvers

• On the single subdomain:

  • python3 main.py --mode dynamic -w words-merged.txt -d api.target.com -pm /usr/bin/massdns -r ~/resolvers

Data Storage
This tool uses MongoDB database for data storage

• Switch --insert Stored data:
  • Subdomain
  • Data added
  • Mode

Get List of Subdomains

• Filter by mode:

  • python3 main.py --get -d target.com -m static

• Without filtering:

  • python3 main.py -g -d target.com

Download:

To view the content, you need to Sign In or Register.