Generate Custom DNS Wordlists
Generate custom DNS brute force wordlists using known hostnames
Category
Attack Surface Management
Inputs
hostnames
file
requiredList of hostnames
Outputs
level-1-wordlistlevel-2-wordlistlevel-3-wordlistlevel-4-wordlist
Features
Generate Custom DNS Wordlists
Description
Generate custom DNS brute force wordlists using known hostnames. This module creates wordlists suitable for both root and recursive DNS brute force that have a high likelihood of finding assets on your target domains by deriving the wordlists from existing keywords and naming conventions.
Features
- Generates custom wordlists tailored to your target’s unique keywords and naming conventions.
- Creates different types of wordlists for root and recursive brute force.
- Readily integrates with the Enumerate Hostnames via Root Domain DNS Brute Force and Enumerate Hostnames via Recursive DNS Brute Force modules.
Inputs
Required
- hostnames: a list of hostnames
foo.example.com
staging.foo.example.com
dashboard.staging.foo.example.com
2022.dashboard.staging.foo.example.com
Outputs
- level-1-wordlist: Wordlist suitable for level-1 (root) DNS brute force, including all the keywords and combinations found in the hostnames.
example
foo
staging
dashboard
2022
staging.foo
dashboard.staging.foo
2022.dashboard.staging.foo
- level-2-wordlist: Wordlist suitable for level-2 DNS brute force
staging
- level-3-wordlist: Wordlist suitable for level-3 DNS brute force
dashboard
- level-4-wordlist: Wordlist suitable for level-4 DNS brute force
2022
Changelog
- v1.0
- Initial release