subbrute subdomain bruteforce 

SubBrute is a community driven project with the goal of creating the fastest, and most accurate subdomain enumeration tool. Some of the magic behind SubBrute is that it uses open resolvers as a kind of proxy to circumvent DNS rate-limiting. This design also provides a layer of anonymity, as SubBrute does not send traffic directly to the target's name servers.

Installation & Use: 

No install required for Windows, just cd into the 'windows' folder:

  • subbrute.exe google.com

Easy to install: You just need and python2.7 or python3. This tool should work under any operating system: bsd, osx, windows, linux...

(On a side note giving a makefile root always bothers me, it would be a great way to install a backdoor...)

Under Ubuntu/Debian all you need is:

  • sudo apt-get install python-dnspython

On other operating systems you may have to install dnspython manually:

Easy to use:

  • ./subbrute.py google.com

Tests multiple domains:

  • ./subbrute.py google.com gmail.com blogger.com

or a newline delimited list of domains:

  • ./subbrute.py -t list.txt

Also keep in mind that subdomains can have subdomains (example: _xmpp-server._tcp.gmail.com):

  • ./subbrute.py gmail.com > gmail.out

  • ./subbrute.py -t gmail.out

Download: Subbrute v1.2.1

0 comments :

Post a comment

 
Top