h4cker/programming_and_scripting_for_cybersecurity/recon_scripts/dns-recon2.sh
2021-07-18 23:37:18 -04:00

7 lines
245 B
Bash

#!/bin/bash
# bruteforce subdomains
# Use a wordlist of your choice. I am using dnscan's wordlist in this example
for domain in $(cat /usr/share/wordlists/dnscan/subdomains-100.txt);
do host $domain.h4cker.org;sleep 2;done | grep has | sort -u