dnsmap

Description

A DNS subdomain brute-forcing tool used during the information gathering phase. It discovers subdomains of a target domain by using a built-in wordlist or a custom one to perform DNS queries and identify valid hosts.

Usage 1: Brute-Force Subdomains for a Domain

Run dnsmap against a target domain to brute-force and discover subdomains using the built-in wordlist.

Command:

dnsmap domain.com

Notes

Uses a built-in wordlist by default for subdomain brute-forcing.
Custom wordlists can be specified for more targeted enumeration.
Pre-installed on Kali Linux.