Editing
Dnsmap
(section)
Jump to navigation
Jump to search
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
= dnsmap = '''dnsmap''' is an open-source C utility that performs fast **brute-force subdomain enumeration**. It resolves each candidate name against a chosen DNS resolver, stores live hosts, and outputs simple CSV or text reports. Unlike full-spectrum tools such as [[dnsenum]], dnsmap focuses purely on word-list brute-forcing and wildcard detection. == <span id="options"></span>Common Options == === Enumeration === {| class="wikitable" ! Option !! Description |- | <code>[WORDLIST]</code> || Custom wordlist file (default: <code>dnsmap.txt</code> in tool directory) |- | [[#ex-domain|<code>-d [DOMAIN]</code>]] || Target domain (required) |- | [[#ex-resolver|<code>-s [SERVER]</code>]] || Use specific DNS resolver (default: system resolver) |- | [[#ex-wild|<code>-c</code>]] || Check for wildcard DNS and filter false positives |- | [[#ex-delay|<code>-w [MS]</code>]] || Delay (milliseconds) between queries (throttle speed) |} === Output === {| class="wikitable" ! Option !! Description |- | [[#ex-save|<code>-o [FILE]</code>]] || Save results in CSV format |- | <code>-v</code> || Verbose output showing every query |- | <code>-q</code> || Quiet mode (show only found subdomains) |} == Examples == === <span id="ex-domain"></span>Basic Subdomain Brute-Force === <syntaxhighlight lang="bash"> dnsmap -d example.com </syntaxhighlight> ''[[#options|β Options]]'' === <span id="ex-resolver"></span>Use Custom DNS Resolver === <syntaxhighlight lang="bash"> dnsmap -d example.com -s 8.8.8.8 </syntaxhighlight> ''[[#options|β Options]]'' === <span id="ex-wild"></span>Detect and Filter Wildcard DNS === <syntaxhighlight lang="bash"> dnsmap -d example.com -c </syntaxhighlight> ''[[#options|β Options]]'' === <span id="ex-delay"></span>Throttle Queries (200 ms Delay) === <syntaxhighlight lang="bash"> dnsmap -d example.com -w 200 </syntaxhighlight> ''[[#options|β Options]]'' === <span id="ex-save"></span>Save Results to CSV === <syntaxhighlight lang="bash"> dnsmap -d example.com -o found.csv </syntaxhighlight> ''[[#options|β Options]]'' == Output Fields == * '''Subdomain''' that successfully resolved * '''Resolved IP address''' (first A-record) * Optional CSV output: <code>subdomain,ip</code> == See Also == * [[dnsenum]] * [[dnsrecon]] * [[Amass]] * [[Sublist3r]]
Summary:
Please note that all contributions to HackOps may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
HackOps:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Page
Discussion
English
Views
Read
Edit
Edit source
View history
More
Search
Navigation
Tools
What links here
Related changes
Special pages
Page information