DNS_Hunter
DNS enumeration tool. Main idea of yet another DNS discovery tool is hashcat feature with bruting by masks.
TODO
Please pay attention that only long options supported. Sorry for that, will fix later.
Installation
From DNS_Hunter directory (Tested on linux):
$ sudo cpan -i Module::CPANfile
$ sudo cpanm --installdeps .
Note: Sudo is required for default CPAN configuration due to it stores Perl modules in /usr directory.
Note2: In case you have issue with AnyEvent::DNS installation, please try to install it manually with cpan
$cpan -i AnyEvent::DNS
Options
Required options:
--domain <domain name> - domain address to brute
--output-file </path/to/file> - file to save results
One of the following bruting option required(or both can be used):
--mask <mask> - mask for bruting
--sub-list </path/to/subdomain/list> - subdomain list
Optional parameters:
--uniq <number> (default:5) - Uniq IP address threshold
--max-dns-query <number> (default:10) - Number of parallel DNS resolutions
--no-resolve - Only generates domain names w/o resolving
--leet - Replace chars with 1337 numbers!
Mask syntax:
?c - char
?d - digit
?a - digit+char
{sub} - subdomain
Any bare chars can be used as is.
Example: ./dns_hunter.pl --domain example.com --output-file /tmp/result --sub-list sub_list_for_test.txt --mask '?c{sub}-?d{sub}-anywords'