The big news in this version is that SubBrute is now a recursive DNS-spider, and also a library, more on this later. SubBrute should be easy to use, so the interface should be intuitive (like nmap!), if you would like the interface to change, let us know. In this version we are opening up SubBrute's fast DNS resolution pipeline for any DNS record type. Additionally, SubBrute now has a feature to detect subdomains were their resolution is intentionally blocked, which sometimes happens when a subdomain is intended for for use on an internal network.
- SubBrute is now a DNS spider that recursively crawls enumerated DNS records. This feature boosted *.google.com from 123 to 162 subdomains. (Always enabled)
- --type enumerate an arbitrary record type (AAAA, CNAME, SOA, TXT, MX...)
- -s can now read subdomains from result files.
- New useage - The subdomains enumerated from previous scans can now be used as input to enumerate other DNS records. The following commands demonstrate this new functionality:
How to use :
- ./subbrute.py google.com
Tests multiple domains:
- ./subbrute.py google.com gmail.com blogger.com
or a newline delimited list of domains:
- ./subbrute.py -t list.txt
Also keep in mind that subdomains can have subdomains (example: _xmpp-server._tcp.gmail.com):
- ./subbrute.py gmail.com > gmail.out
- ./subbrute.py -t gmail.out
Posts
No comments:
Post a Comment