PHASE: DNS Brute Forcing33% COMPLETION
Abort Mission
MODULE 03

Active Subdomain Enumeration

Brute-forcing subdomains with MassDNS and permutation scanning.

DNS Brute Forcing

When passive sources fail, we guess.

Wordlists

files like `all.txt` from the Assetnote Wordlists repository are standard.

Performance

Tools like MassDNS and Puredns can resolve 300,000 domains per second using public resolvers.