View source for Dnsmap

= dnsmap =

'''dnsmap''' is an open-source C utility that performs fast **brute-force subdomain enumeration**.  
It resolves each candidate name against a chosen DNS resolver, stores live hosts, and outputs simple CSV or text reports.  
Unlike full-spectrum tools such as [[dnsenum]], dnsmap focuses purely on word-list brute-forcing and wildcard detection.

== <span id="options"></span>Common Options ==

=== Enumeration ===
{| class="wikitable"
! Option !! Description
|-
| <code>[WORDLIST]</code> || Custom wordlist file (default: <code>dnsmap.txt</code> in tool directory)
|-
| [[#ex-domain|<code>-d&nbsp;[DOMAIN]</code>]] || Target domain (required)
|-
| [[#ex-resolver|<code>-s&nbsp;[SERVER]</code>]] || Use specific DNS resolver (default: system resolver)
|-
| [[#ex-wild|<code>-c</code>]] || Check for wildcard DNS and filter false positives
|-
| [[#ex-delay|<code>-w&nbsp;[MS]</code>]] || Delay (milliseconds) between queries (throttle speed)
|}

=== Output ===
{| class="wikitable"
! Option !! Description
|-
| [[#ex-save|<code>-o&nbsp;[FILE]</code>]] || Save results in CSV format
|-
| <code>-v</code> || Verbose output showing every query
|-
| <code>-q</code> || Quiet mode (show only found subdomains)
|}

== Examples ==

=== <span id="ex-domain"></span>Basic Subdomain Brute-Force ===
<syntaxhighlight lang="bash">
dnsmap -d example.com
</syntaxhighlight>
''[[#options|↑ Options]]''

=== <span id="ex-resolver"></span>Use Custom DNS Resolver ===
<syntaxhighlight lang="bash">
dnsmap -d example.com -s 8.8.8.8
</syntaxhighlight>
''[[#options|↑ Options]]''

=== <span id="ex-wild"></span>Detect and Filter Wildcard DNS ===
<syntaxhighlight lang="bash">
dnsmap -d example.com -c
</syntaxhighlight>
''[[#options|↑ Options]]''

=== <span id="ex-delay"></span>Throttle Queries (200 ms Delay) ===
<syntaxhighlight lang="bash">
dnsmap -d example.com -w 200
</syntaxhighlight>
''[[#options|↑ Options]]''

=== <span id="ex-save"></span>Save Results to CSV ===
<syntaxhighlight lang="bash">
dnsmap -d example.com -o found.csv
</syntaxhighlight>
''[[#options|↑ Options]]''

== Output Fields ==

* '''Subdomain''' that successfully resolved  
* '''Resolved IP address''' (first A-record)  
* Optional CSV output: <code>subdomain,ip</code>

== See Also ==
* [[dnsenum]]
* [[dnsrecon]]
* [[Amass]]
* [[Sublist3r]]