- This topic has 6 replies, 3 voices, and was last updated 4 months, 3 weeks ago by
.
-
Posts
-
After running bunch of tools I’ve list of subdomains. Now I want to do the recursion(like for each sub again subfinder, findomain etc). So my question is it worth recursing for every subdomain without knowing if it’s wildcard or not?
Try using puredns.
That way, it will bruteforce the list of subdomains, find the valid ones – and later will take care of the wildcards, leaving you with a unique list of subdomains that you don’t have to worry about wildcards.
Apart of bruteforce you can feed the list from passive resources just to resolve.
Thanks I think that will do as I already use puredns for resolving part. I went through Wikipedia and seems like worth it. I don’t know when but whole dns thing is so broad that reading rfc feels necessary.
I was using puredns but didn’t knew it will handle the wildcards by itself.
If you are going to use puredns get a nice list of resolvers, you can find them here:
https://github.com/felipecaon/resolvers
It is a list of already known and resolvered IPs but with re-checking steps, I’ve found out that rechecking makes them less noisy because a lot of DNSes are configured to cloak results.
- You must be logged in to reply to this topic.
