Skip to content

Commit

Permalink
upgrade to v1.1: add multi process support
Browse files Browse the repository at this point in the history
  • Loading branch information
lijiejie committed Feb 6, 2018
1 parent 9c29b7f commit 2e1b5cd
Show file tree
Hide file tree
Showing 10 changed files with 15,805 additions and 2,052 deletions.
3 changes: 2 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
@@ -1,2 +1,3 @@
*.py[cod]
.idea/*
.idea/*
tmp/
30 changes: 15 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,50 +1,50 @@
subDomainsBrute 1.0.6
subDomainsBrute 1.1
======

A simple and fast sub domain brute tool for pentesters. It can rearch as fast as 1000 DNS queries per second.
A fast sub domain brute tool for pentesters.

这个脚本的主要目标是发现其他工具无法探测到的域名, 如Google,aizhan,fofa。高频扫描每秒DNS请求数可超过1000次
本工具用于渗透测试目标域名收集。高并发DNS暴力枚举,发现其他工具无法探测到的域名, 如Google,aizhan,fofa。

## Change Log (2017-6-3) ##
* 增加CNAME扫描,扫描时间将增加
* Bug fix: normal_lines remove deep copy issus, thanks @BlueIce
You can get older versions via [https://github.com/lijiejie/subDomainsBrute/releases](https://github.com/lijiejie/subDomainsBrute/releases)


## Change Log (2017-5-4) ##
* 使用协程替代了多线程
* 使用了优化级队列,来减小队列的长度
* 增加了占位符{next_sub}
## Change Log
* [2018-02-06]
* 添加多进程支持。 多进程 + 协程,提升扫描效率。
* 预处理了原字典中的占位符,提升扫描效率
* [2017-06-03] Bug fix: normal_lines remove deep copy issus, thanks @BlueIce
* [2017-05-04] 使用协程替代多线程; 使用了优化级队列,来减小队列的长度; 优化占位符支持


## Dependencies ##
> pip install dnspython gevent

## Usage ##

Usage: subDomainsBrute.py [options] target.com

Options:
--version show program's version number and exit
-h, --help show this help message and exit
-f FILE A file contains new line delimited subs, default is
-f FILE File contains new line delimited subs, default is
subnames.txt.
--full Full scan, NAMES FILE subnames_full.txt will be used
to brute
-i, --ignore-intranet
Ignore domains pointed to private IPs
-t THREADS, --threads=THREADS
Num of scan threads, 200 by default
-p PROCESS, --process=PROCESS
Num of scan Process, 6 by default
-o OUTPUT, --output=OUTPUT
Output file name. default is {target}.txt


## Screenshot ##

如下图所示,小字典扫描qq.com,发现758个域名,耗时在100s以内
如图,使用默认字典,扫描qq.com,发现去重后域名2319个,耗时约298秒

![screenshot](screenshot.png)

Output file could be like: [https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_qq.com.txt](https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_qq.com.txt)
Output could be like: [https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_qq.com.txt](https://github.com/lijiejie/subDomainsBrute/blob/master/dict/sample_qq.com.txt)

From [http://www.lijiejie.com](http://www.lijiejie.com)
Loading

0 comments on commit 2e1b5cd

Please sign in to comment.