Brute-force and resolve subdomains with massdns

shuffleDNS wraps massdns to do two jobs at scale: brute-force new subdomains from a wordlist, and resolve a list of candidate names to find which ones answer. It keeps massdns's raw speed while adding the pipeline conveniences that make it usable, including clean input and output handling and proper wildcard detection.

Wildcard handling is what sets it apart from a naive resolver. Many domains return an answer for any subdomain you ask for, which floods brute-force results with false positives. shuffleDNS detects those wildcard responses and filters them out, with a strict mode that checks every found subdomain and tunable concurrency for both resolution and wildcard checks.

On Trickest, shuffledns is a Recon node that takes a domain plus a resolver list and writes a file and a folder of results. Run it in brute-force mode with a wordlist to expand a target's subdomain set, or in resolve mode over subdomains gathered from passive sources before they reach a prober like httpx.