loading
Loading content
loading
Utilities
Generate domain name combinations from input domains using a wordlist.
overview
dnsgen takes a list of domains you already found and produces a much larger list of plausible candidates by combining them with a wordlist and with custom words pulled from the inputs themselves. If your list contains api.example.com and dev.example.com, it generates names like api-dev, dev-api, and other patterns an organization tends to use.
It only generates names, it does not resolve them. That keeps it fast and composable: dnsgen writes the candidate list, and a resolver downstream decides which exist. A fast generation mode trades some breadth for speed on very large inputs.
On Trickest dnsgen is a Utilities node that takes a domains file and writes a file and a folder of generated candidates. Feed its output into a resolver such as shuffledns or dnsx to keep only the names that resolve, then probe the survivors with httpx.
use cases
Generate permutations from discovered subdomains so a resolver can find related hosts that passive sources never returned.
Let dnsgen extract custom words from your domains and recombine them, capturing the naming conventions an organization uses.
Write candidates that a fast resolver validates, turning a permutation list into a clean set of live names for probing.
Enable --fast when the input list is huge and you need candidates quickly before a mass DNS resolve.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domains | FILE | · | List of domains |
| custom-wordlist | FILE | --wordlist | Custom wordlist. |
| word-length | STRING | --wordlen | Min length of custom words extracted from domains. [1<=x<=100] |
| fast-generation | BOOLEAN | --fast | Fast generation |
Showing key inputs. dnsgen exposes 4 inputs in total.
example
# dnsgen: permute known hosts, mine short custom words, write candidatescat known-domains.txt | dnsgen - --wordlen 3 --wordlist words.txt > candidates.txtapi-dev.example.comdev-api.example.comstaging-api.example.comapi-staging.example.comwww-dev.example.comdev-www.example.commail-backup.example.combackup-mail.example.comvpn-test.example.comguidance
Use dnsgen to turn a known subdomain list into permutation candidates, then resolve them with a separate tool. For generation plus built-in resolution in one node, use dmut. dnsgen makes names; pair it with shuffledns or dnsx to keep only those that resolve.
Generates and resolves permutations in one run. dnsgen only generates, leaving resolution to a downstream tool.
Permutation generator with configurable rules and depth. dnsgen mines custom words from the inputs.
Alteration-based generator. dnsgen leans on a wordlist plus extracted words.
faq
related
Import, export, and link workflow data with Airtable.
Decode Android APK files into smali sources and resources.
Check a file's values against conditions and exit with a matching code.
Extract all hosted zones from AWS Route53.
Output file lines by batch size, given START_LINE and END_LINE.
Extract a batch range from a file's lines or a folder's files, with parallel processing.
A known-domains list feeds dnsgen, which generates permutations and hands them to dnsx, which resolves the candidates into live names as output.
Facts on this page come from the live Trickest tool library.