dnsmap

linux

The dnsmap command scans a domain for common subdomains e.g. smtp.domain.org.

Examples (4)

Scan for subdomains using the internal wordlist

dnsmap example.com

Specify a list of subdomains to check for

dnsmap example.com -w path/to/wordlist.txt

Store results to a CSV file

dnsmap example.com -c path/to/file.csv

Ignore 2 IPs that are false positives (up to 5 possible)

dnsmap example.com -i 123.45.67.89,98.76.54.32