pnk

Produce a new combination of subdomains - generates permutations P(n,k).

Make it work

• [x] swap subs themselves: web.test.domain.com -> test.web.domain.com
• [x] increase/decrease digits on subs with numbers: test1.domain.com -> test2.domain.com

Make it right

1. stdin: reads standard input. This is useful for capturing a pipeline’s contents at an intermediate stage of processing.
2. stdout: supports standard output.
3. Works with the next arguments:

   
   usage: pnk [-h] [-i | -c] [-d] [-r] [-t TARGET] [-w WORDLIST] [-v] [FILE ...]

Generates a new subdomains on provided input

positional arguments: FILE list of subdomains/hosts to process

optional arguments: -h, --help show this help message and exit -i, --increment increment any one or two digits on subdomains -c, --cartesian increment digits on subdomains creating their Cartesian product -d, --data generate test data from the stdin -r, --replace replace underscores and dashes with dots -t TARGET, --target TARGET target domain to find subs for (which will not be processed) -w WORDLIST, --wordlist WORDLIST mixed subdomains with wordlist -v, --version show program's version number and exit

```bash
$ cat subs1.txt subs2.txt | pnk

Make it fast

• threading: issue/5
• multiprocessing: to turn this single I/O bound process script into multiprocess use interlace.

Features

Permutations:

echo "aws3-3.s11.env2.tesla.com" | pnk
aws3-3.s11.env2.tesla.com
aws3-3.env2.s11.tesla.com
s11.aws3-3.env2.tesla.com
s11.env2.aws3-3.tesla.com
env2.aws3-3.s11.tesla.com
env2.s11.aws3-3.tesla.com

With incrementation option:

echo "aws3-3.s11.env2.tesla.com" | pnk -i
aws0-3.s11.env2.tesla.com
aws1-3.s11.env2.tesla.com
aws2-3.s11.env2.tesla.com
...
aws8-8.s11.env2.tesla.com
aws9-9.s11.env2.tesla.com
...

Using the cartesian product option:

echo "v0.1-v2.tcsbank.ru" | pnk -c
v0.dev0-v0.tcsbank.ru
v1.dev0-v0.tcsbank.ru
...
v0.dev1-v0.tcsbank.ru
v0.dev2-v0.tcsbank.ru
...
v9.dev9-v8.tcsbank.ru
v9.dev9-v9.tcsbank.ru

Install & Usage

PyPi:

pip3 install --no-deps pnk

From the source code:

$ cat subs1.txt subs2.txt | ./src/pnk/__main__.py

Constraints

Limitations

1. Does't handle increment option in the following cases: more then two digits:

   v123.tesla.com -> v123.tesla.com
   aws.1002030v.amazon.com -> aws.1002030v.amazon.com

2. Does not ships with DNS resolver, use massdns

   $ pnk < list.txt | massdns -

3. Possible out of memory issues when redirecting stdout to a file, please read the Wiki

Feature request

See the open issue for the following feature requests:

• [ ] replace keywords with word in wordlist: v2.test.domain.com -> v2.stage.domain.com .. v2.prod.domain.com
• [ ] prepend/append word by creating new subs: test.domain.com -> demo.test.domain.com, test.demo.domain.com