https://github.com/mfocuz/DNS_Hunter

DNS enumeration tool
https://github.com/mfocuz/DNS_Hunter

Last synced: 22 days ago
JSON representation

DNS enumeration tool

• Host: GitHub
• URL: https://github.com/mfocuz/DNS_Hunter
• Owner: mfocuz
• License: mit
• Archived: true
• Created: 2017-09-28T13:15:44.000Z (about 7 years ago)
• Default Branch: master
• Last Pushed: 2018-05-23T13:32:07.000Z (over 6 years ago)
• Last Synced: 2024-08-05T17:33:09.519Z (4 months ago)
• Language: Perl
• Size: 32.2 KB
• Stars: 4
• Watchers: 1
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - mfocuz/DNS_Hunter - DNS enumeration tool (Perl)

README

        
## DNS_Hunter

DNS enumeration tool.

Main idea of yet another DNS discovery tool is hashcat feature with bruting by masks.

## TODO

Please pay attention that only long options supported. Sorry for that, will fix later.

## Installation

From DNS_Hunter directory (Tested on linux):

```

$ sudo cpan -i Module::CPANfile

$ sudo cpanm --installdeps .

```

*Note:* Sudo is required for default CPAN configuration due to it stores Perl modules in /usr directory.

*Note2:* In case you have issue with AnyEvent::DNS installation, please try to install it manually with cpan

```

$cpan -i AnyEvent::DNS

```

## Options

```

Required options:

  --domain                 - domain address to brute

  --output-file          - file to save results

 

One of the following bruting option required(or both can be used):

  --mask                          - mask for bruting

  --sub-list   - subdomain list

Optional parameters:

  --uniq  (default:5)           - Uniq IP address threshold

  --max-dns-query  (default:10) - Number of parallel DNS resolutions

  --no-resolve                          - Only generates domain names w/o resolving

  --leet                                - Replace chars with 1337 numbers!

Mask syntax:

  ?c - char

  ?d - digit

  ?a - digit+char

  {sub} - subdomain 

  Any bare chars can be used as is.

  

  Example: ./dns_hunter.pl --domain example.com --output-file /tmp/result --sub-list sub_list_for_test.txt --mask '?c{sub}-?d{sub}-anywords'

```