loading
Loading content
loading
Utilities
Wordlist and mined-word subdomain permutation.
overview
dnsgen reads a domains file and emits a larger candidate set by combining those seeds with --wordlist labels and custom words mined from the inputs (--wordlen sets the minimum mined length).
Use it after passive or active discovery has a seed list, when you want related names that sources never returned. It does not resolve; a false-looking name is still just a string until dnsx or shuffledns keeps the hits.
Compared with dmut, dnsgen stops at generation. As a managed Trickest node, wire its file or folder into shuffledns or dnsx, then probe survivors with httpx. Flip --fast when the seed list is huge and you can trade some patterns for speed.
use cases
Generate permutations from discovered subdomains so a resolver can find related hosts that passive sources never returned.
Let dnsgen extract custom words from your domains and recombine them, capturing the naming conventions an organization uses.
Write candidates that a fast resolver validates, turning a permutation list into a clean set of live names for probing.
Enable --fast when the input list is huge and you need candidates quickly before a mass DNS resolve.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domains | FILE | · | List of domains |
| custom-wordlist | FILE | --wordlist | Custom wordlist. |
| word-length | STRING | --wordlen | Min length of custom words extracted from domains. [1<=x<=100] |
| fast-generation | BOOLEAN | --fast | Fast generation |
Showing key inputs. dnsgen exposes 4 inputs in total.
example
# dnsgen: permute known hosts, mine short custom words, write candidatescat known-domains.txt | dnsgen - --wordlen 3 --wordlist words.txt > candidates.txtapi-dev.example.comdev-api.example.comstaging-api.example.comapi-staging.example.comwww-dev.example.comdev-www.example.commail-backup.example.combackup-mail.example.comvpn-test.example.comguidance
Use when you already have subdomains and need permutation candidates for a separate resolve step. Prefer dmut when generation and resolution must stay in one node. Prefer gotator when you want deeper rule-driven alterations instead of mined words plus a wordlist.
Generates and resolves in one run. dnsgen only generates.
Rule and depth driven permutations. dnsgen mines custom words from the seed domains.
Alteration-based generator. dnsgen leans on --wordlist plus extracted words.
faq
related
Spider a URL and return a wordlist for password crackers.
Import, export, and upsert workflow data against an Airtable base.
Decode Android APK files into smali sources and resources.
Check a file's values against conditions and exit with a matching code.
Authenticated Route53 hosted-zone inventory.
Extract file or folder lines by START_LINE,END_LINE batch range.
A known-domains list feeds dnsgen, which generates permutations and hands them to dnsx, which resolves the candidates into live names as output.
Facts on this page come from the live Trickest tool library.