subdomainsBrute
高并发的DNS暴力枚举工具,支持Python3.6+和Python2.7,建议使用Python3.8+。
极佳工具!!爆破的快!命中率、准确率也都高!!
建议配合 oneforall 食用!!本脚本跑 bilibili.com 跑出 52 个子域名,配合 oneforall 共跑出 350+ 个子域名,去重后共还剩下 180+ 个子域名!且很多很多大部分为访问状态码 200 的子域名资产!!准确率极高!!
使用方法
python subdomainsBrute domain.com -w --full -o domain.txt
-w, --wildcard Force scan after wildcard test fail
--full Full scan, NAMES FILE subnames_full.txt will be used to brute - 使用全部字典爆破
-t THREADS, --threads=THREADS Num of scan threads, 200 by default
不需要设置 -t,该工具默认的 200 线 不影响正确率!!nice!!
subdomainsBrute -h
root@QiaoShen:~/QiaoShen/subdomainsBrute# python subdomainsBrute.py -h
Usage: subdomainsBrute.py [options] target.com
Options:
--version show program's version number and exit
-h, --help show this help message and exit
-f FILE File contains new line delimited subs, default is
subnames.txt.
--full Full scan, NAMES FILE subnames_full.txt will be used
to brute
-i, --ignore-intranet
Ignore domains pointed to private IPs
-w, --wildcard Force scan after wildcard test fail
-t THREADS, --threads=THREADS
Num of scan threads, 200 by default
-p PROCESS, --process=PROCESS
Num of scan Process, 6 by default
-o OUTPUT, --output=OUTPUT
Output file name. default is {target}.txt
版权声明:
本站所有文章除特别声明外,均采用 CC BY-NC-SA 4.0 许可协议。转载请注明来自
QiaoShen-World!
喜欢就支持一下吧