https://github.com/shelld3v/flydns

Related subdomains finder
https://github.com/shelld3v/flydns

bug-bounty bugbounty hacking infosec network-security osint pentest pentesting recon reconnaissance security subdomains subdomains-discovery

Last synced: 3 months ago
JSON representation

Related subdomains finder

• Host: GitHub
• URL: https://github.com/shelld3v/flydns
• Owner: shelld3v
• License: apache-2.0
• Created: 2020-12-10T15:11:43.000Z (about 4 years ago)
• Default Branch: master
• Last Pushed: 2022-05-18T15:44:53.000Z (over 2 years ago)
• Last Synced: 2024-10-14T17:06:11.886Z (4 months ago)
• Topics: bug-bounty, bugbounty, hacking, infosec, network-security, osint, pentest, pentesting, recon, reconnaissance, security, subdomains, subdomains-discovery
• Language: Python
• Homepage:
• Size: 161 KB
• Stars: 29
• Watchers: 2
• Forks: 4
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# FlyDNS - Related subdomains discovery tool

## What is FlyDNS

FlyDNS was first a fork of Altdns, but then has been updated to become a separated recon tool.

FlyDNS will try to find related subdomains from user given subdomains, by generating permutations, mutations, alterations. The alterations came from combinations between wordlist entries and subdomains patterns.

## Installation

```

git clone https://github.com/shelld3v/flydns.git

cd flydns

pip3 install .

```

## Usage

| Flag | Description

|------|------------------------------------------------------

|  -s  | Target subdomains

|  -i  | Subdomains list from a file

|  -o  | Output of altered and permuted subdomains.

|  -w  | Your wordlist.

|  -f  | Output of resolved subdomains.

|  -t  | How many threads the resolver will use simultaneously

|  -r  | Perform discovery recursively

|  -d  | System DNS resolvers

|  -e  | Exclude subdomains by DNS answers

|  -R  | Reverse DNS lookup for IP addresses

|  -p  | Ports to scan

|  -a  | Look for only active subdomains

|  -n  | Add number suffix to every domain (0-9)

|  -W  | Perform Whois lookup for every resolved subdomains

Example: `flydns -i subdomains.txt -o output_subdomains.txt -f resolved_result.txt`

## More

This tool is currently in development by @shelld3v, feel free to request a feature!