Skip to content

Releases: TheRook/subbrute

1.2.1, because 1.2 was too small of a number

24 Mar 18:57
Compare
Choose a tag to compare

Yeah so 1.2 had some trouble...

Whats new in v1.2.1?

The big news in this version is that SubBrute is now a recursive DNS-spider, and also a library, more on this later. SubBrute should be easy to use, so the interface should be intuitive (like nmap!), if you would like the interface to change, let us know. In this version we are opening up SubBrute's fast DNS resolution pipeline for any DNS record type. Additionally, SubBrute now has a feature to detect subdomains were their resolution is intentionally blocked, which sometimes happens when the a subdomain cannot be externally resolved.

  • subbrute is now a DNS spider that recursively crawls enumerated DNS records. This feature boosted *.google.com from 123 to 162 subdomains. (Always enabled)
  • --type enumerate an arbitrary record type (AAAA, CNAME, SOA, TXT, MX...)
  • -s can now read subdomains from result files.
  • SubBrute is now a library: subbrute.run()
  • Restricted subdomain resolution detection
  • New useage - The subdomains enumerated from previous scans can now be used as input to enumerate other DNS records. The following commands demonstrate this new functionality:
    ./subbrute.py google.com -o google.names
        ...162 subdomains found...

    ./subbrute.py -s google.names google.com --type TXT
        google.com,"v=spf1 include:_spf.google.com ip4:216.73.93.70/31 ip4:216.73.93.72/31 ~all"
        adwords.google.com,"v=spf1 redirect=google.com"
        ...

    ./subbrute.py -s google.names google.com --type CNAME
        blog.google.com,www.blogger.com,blogger.l.google.com
        groups.google.com,groups.l.google.com
        ...

-Do you want to use SubBrute in your python projects? Consider the new library interface:

    import subbrute

    for d in subbrute.run("google.com"):
        print d 

Feedback welcome.

SubBrute v1.2

22 Mar 19:05
Compare
Choose a tag to compare

In this version we are opening up SubBrute's fast DNS resolution pipeline for any DNS record type. SubBrute now has a feature to detect subdomains were their resolution is intentionally blocked, which sometimes happens when the a subdomain cannot be resolved externally.

  • --aaaa enumerate ipv6 AAAA records
  • --cname enumerate cname records
  • --type enumerate an arbitrary record type (SOA, TXT, MX...)
  • Restricted subdomain resolution detection