The dnsmap command scans - dnsmap

TLDR pages
1

The dnsmap command scans a domain for common subdomains e.g. smtp.domain.org. More information: GitHub - resurrecting-open-source-projects/dnsmap: Scan for subdomains using bruteforcing techniques.

  • Scan for subdomains using the internal wordlist:

dnsmap {{example.com}}

  • Specify a list of subdomains to check for:

dnsmap {{example.com}} -w {{path/to/wordlist.txt}}

  • Store results to a CSV file:

dnsmap {{example.com}} -c {{path/to/file.csv}}

  • Ignore 2 IPs that are false positives (up to 5 possible):

dnsmap {{example.com}} -i {{123.45.67.89,98.76.54.32}}