subbrute

attacking_common_services

subbrute (3.2k ⭐, 2017 🪦) is a tool that may be used to enumerate DNS information of a domain.

To brute force subdomains:

$ git clone https://github.com/TheRook/subbrute.git
$ cd subbrute
$ echo "ns1.xxx.yyy" > resolvers.txt
$ ./subbrute.py xxx.yyy -s wordlist.txt -r resolvers.txt -v

⚠️ You must add the domain + each resolver in your host file.