h4cker/programming_and_scripting_for_cybersecurity/recon_scripts/dns-recon2.sh

7 lines
245 B
Bash
Raw Normal View History

2021-07-19 03:37:18 +00:00
#!/bin/bash
# bruteforce subdomains
# Use a wordlist of your choice. I am using dnscan's wordlist in this example
for domain in $(cat /usr/share/wordlists/dnscan/subdomains-100.txt);
do host $domain.h4cker.org;sleep 2;done | grep has | sort -u