Subdomain Bruteforcing


Cheat sheet

CommandDescription
dnsenum --enum inlanefreight.com -f /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -rPerforms DNS enumeration on inlanefreight.com, using a custom wordlist for brute-forcing subdomains (-f) and enables recursive subdomain brute-forcing (-r).

Subdomain Brute-Force Enumeration is a powerful active subdomain discovery technique that leverages pre-defined lists of potential subdomain names.

ToolDescription
dnsenumComprehensive DNS enumeration tool that supports dictionary and brute-force attacks for discovering subdomains.
fierceUser-friendly tool for recursive subdomain discovery, featuring wildcard detection and an easy-to-use interface.
dnsreconVersatile tool that combines multiple DNS reconnaissance techniques and offers customizable output formats.
amassActively maintained tool focused on subdomain discovery, known for its integration with other tools and extensive data sources.
assetfinderSimple yet effective tool for finding subdomains using various techniques, ideal for quick and lightweight scans.
purednsPowerful and flexible DNS brute-forcing tool, capable of resolving and filtering results effectively.