Generate Custom DNS Wordlists

Generate custom DNS brute force wordlists using known hostnames

Attack Surface Management

Created by

trickest-mhmdiaa

Last updated

7/4/2024

Input Parameters

hostnames · file · required

List of hostnames

Outputs

level-1-wordlistlevel-2-wordlistlevel-3-wordlistlevel-4-wordlist

Generate Custom DNS Wordlists

Description

Generate custom DNS brute force wordlists using known hostnames. This module creates wordlists suitable for both root and recursive DNS brute force that have a high likelihood of finding assets on your target domains by deriving the wordlists from existing keywords and naming conventions.

Features

• Generates custom wordlists tailored to your target’s unique keywords and naming conventions.
• Creates different types of wordlists for root and recursive brute force.
• Readily integrates with the Enumerate Hostnames via Root Domain DNS Brute Force and Enumerate Hostnames via Recursive DNS Brute Force modules.

Inputs

Required

• hostnames: a list of hostnames

foo.example.com
staging.foo.example.com
dashboard.staging.foo.example.com
2022.dashboard.staging.foo.example.com

Outputs

• level-1-wordlist: Wordlist suitable for level-1 (root) DNS brute force, including all the keywords and combinations found in the hostnames.

example
foo
staging
dashboard
2022
staging.foo
dashboard.staging.foo
2022.dashboard.staging.foo

• level-2-wordlist: Wordlist suitable for level-2 DNS brute force

staging

• level-3-wordlist: Wordlist suitable for level-3 DNS brute force

dashboard

• level-4-wordlist: Wordlist suitable for level-4 DNS brute force

2022

Changelog

• v1.0
  • Initial release