A fast sub domain brute tool for pentesters.
本工具用于渗透测试目标域名收集。高并发DNS暴力枚举,发现其他工具无法探测到的域名, 如Google,aizhan,fofa。
You can get older versions via https://github.com/lijiejie/subDomainsBrute/releases
- [2018-02-06]
- 添加多进程支持。 多进程 + 协程,提升扫描效率。
- 预处理了原字典中的占位符,提升扫描效率
- [2017-06-03] Bug fix: normal_lines remove deep copy issus, thanks @BlueIce
- [2017-05-04] 使用协程替代多线程; 使用了优化级队列,来减小队列的长度; 优化占位符支持
pip install dnspython gevent
Usage: subDomainsBrute.py [options] target.com
Options:
--version show program's version number and exit
-h, --help show this help message and exit
-f FILE File contains new line delimited subs, default is
subnames.txt.
--full Full scan, NAMES FILE subnames_full.txt will be used
to brute
-i, --ignore-intranet
Ignore domains pointed to private IPs
-t THREADS, --threads=THREADS
Num of scan threads, 200 by default
-p PROCESS, --process=PROCESS
Num of scan Process, 6 by default
-o OUTPUT, --output=OUTPUT
Output file name. default is {target}.txt
如图,使用默认字典,扫描qq.com,发现去重后域名2319个,耗时约298秒。
Output could be like: https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_qq.com.txt