search

sandialabs / dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
Other
141 stars 37 forks source link

Add Altdns Support #24

Closed CrimsonK1ng closed 5 years ago

CrimsonK1ng commented 5 years ago

https://github.com/infosec-au/altdns

CrimsonK1ng commented 5 years ago

Per the docs:

Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain (such as test, dev, staging) as well as takes in a list of subdomains that you know of.

This might be useful as a post gather step. Once you do initial gather we could hand off the aggregated file to the Altdns program just to see what else may be found.