aiodnsbrute

A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. It’s fast. Benchmarks on small VPS hosts put around 100k DNS resolutions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It’s probably best to avoid using Google’s resolvers if you’re purely interested in speed. Trickest currently supports only json output for aiodnsbrute.

Name:aiodnsbrute

Category:Recon

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/aiodnsbrute:e773a4c

Output Type:

License:Unknown

Source:View Source

Parameters

domain · string · required

Domain to bruteforce

verbose · boolean

--verbosityIncrease output verbosity.

wildcard · boolean

--wildcardWildcard detection. Enabled by default.

wordlist · file · required

--wordlistWordlist to use for brute force.

max-tasks · string

--max-tasksMaximum number of tasks to run asynchronosly.

no-wildcard · boolean

--no-wildcardNo wildcard detection.

resolvers-file · file · required

--resolver-fileA text file containing a list of DNS resolvers to use, one per line, comments start with #. Default: use system resolvers.

dns-lookup-type · boolean

--queryDNS lookup type to use query is faster, but won't return CNAME information. Enabled by default.

get-host-by-name · boolean

--gethostbynameDetects CNAMEs which can be handy for potential subdomain takeover detection.

verify-domain-name · boolean

--verifyVerify domain name is sane before beginning. Enabled by default.

dont-verify-domain-name · boolean

--no-verifyDo not verify domain name.