// the find
evilsocket/dnssearch
A subdomain enumeration tool.
A DNS subdomain brute-forcer: give it a domain and a wordlist, it fires concurrent DNS lookups and reports hits. Dead simple, single-purpose. The audience is pentesters or bug bounty hunters doing recon.
Concurrent workers with a configurable consumer count keeps it fast for large wordlists. Supports A, TXT, and CNAME lookups so you're not just limited to host discovery. Ships a bundled names.txt wordlist so it works out of the box. Docker support means no local Go toolchain required.
Last commit was 2021 — subdomain enumeration tooling has moved well past this (amass, subfinder, dnsx all exist and are actively maintained). No wildcard DNS detection, so a domain that wildcards all subdomains will flood you with false positives. No rate limiting or DNS resolver customization, which matters when targeting real infrastructure. The '-ext' flag mentioned in help text makes no sense for DNS enumeration — looks like a copy-paste artifact that was never cleaned up.