Fast brute DNS records to find subdomains.
- Fast (20-30 seconds to scan 10000 records)
- Included 10k records subdomain dictionary
- Recursively scan
npm install -g dns-scanner
Usage: dns-scanner [options] <domains ...>
Example using built-in dictionary with some domains:
root@debian:~# dns-scanner rambler.ru mail.ru ya.ru
Example using personal dictionary:
root@debian:~# dns-scanner -f ./dic.txt apple.com
-f, --file [value] Dictionary file
-r, --recursive Recursively scan sub-domains
-v, --verbose Show scanning details info
-h, --help output usage information
const target = 'rambler.ru';
const scanner = new DNSScanner({
target,
prefixes: ['www', 'mail', 'ftp', 'webmail', 'smtp', 'pop'],
concurrency: 100,
});
scanner.start();
scanner.on('progress', ({ current, total, percent }) => {
// on each prefix processed
});
scanner.on('item', ({ address, ips }) => {
// on found domain-item
});
scanner.on('done', res => {
// on end of scanning
});
scanner.on('error', res => {
// on any errors
});
MIT