Reconnaissance

puredns

Fast domain resolver and subdomain bruteforcing with wildcard filtering.

intermediate

Linux

Reconnaissance

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Accurate subdomain resolution at scale.

bruteforce with wordlist; resolve; filter wildcards.

Clean datasets beat noisy ones for later stages.

Commands & usage

puredns bruteforce wordlist.txt example.com -r resolvers.txt

puredns resolve subs.txt -r resolvers.txt

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

dnsrecon / dnsenum

DNS enumeration scripts for records, zone transfers, and brute force.

Fierce

DNS reconnaissance tool for locating non-contiguous IP space.

massdns

High-performance DNS stub resolver for bulk lookups.