This is a (fast) multi-threaded python tool for enumerating subdomains. This tool also contains a large list of real subdomains that you will find in the wild. By default this tool does subdomain enumeration about 8 times faster than Fierce, and can chew through 31k lookups in about 5 minutes on a home cable connection.

Using some creative google hacks developer put together a disorganized list of well over a million domain names,  developer  then used a regex to rip out the subdomains and then sorted them by frequency.

There is subs.txt which contains 31280 subdomains. Also having a list of resolvers (resolvers.txt) is best for a multi-threaded application because most dns resolvers have rate-limiting by default. This feature is for speed.

Easy to use: ./subbrute.py target.com

Subscribe Top Hacker Stories via email