Dnsmap
Jump to navigation
Jump to search
dnsmap
dnsmap is an open-source C utility that performs fast **brute-force subdomain enumeration**. It resolves each candidate name against a chosen DNS resolver, stores live hosts, and outputs simple CSV or text reports. Unlike full-spectrum tools such as dnsenum, dnsmap focuses purely on word-list brute-forcing and wildcard detection.
Common Options
Enumeration
| Option | Description |
|---|---|
[WORDLIST] |
Custom wordlist file (default: dnsmap.txt in tool directory)
|
-d [DOMAIN] |
Target domain (required) |
-s [SERVER] |
Use specific DNS resolver (default: system resolver) |
-c |
Check for wildcard DNS and filter false positives |
-w [MS] |
Delay (milliseconds) between queries (throttle speed) |
Output
| Option | Description |
|---|---|
-o [FILE] |
Save results in CSV format |
-v |
Verbose output showing every query |
-q |
Quiet mode (show only found subdomains) |
Examples
Basic Subdomain Brute-Force
dnsmap -d example.comUse Custom DNS Resolver
dnsmap -d example.com -s 8.8.8.8Detect and Filter Wildcard DNS
dnsmap -d example.com -cThrottle Queries (200 ms Delay)
dnsmap -d example.com -w 200Save Results to CSV
dnsmap -d example.com -o found.csvOutput Fields
- Subdomain that successfully resolved
- Resolved IP address (first A-record)
- Optional CSV output:
subdomain,ip