SuperAPI AI Directory

ksubdomain-brute

Security & auditing

View repository

Updated 10-16 07:23

About this skill

ksubdomain stateless subdomain brute-forcing methodology

ksubdomain is a stateless subdomain brute-forcing tool. Core advantages:Extreme speed(raw socket packet sending, 10x faster than dnsx) + Dual validation/enumeration modes + Bandwidth control. Requires root privileges.

Project address:https://github.com/boy-hack/ksubdomain

Phase 1: Validation mode

# 验证子域名列表存活
sudo ksubdomain verify -d subdomains.txt -o alive.txt

# 控制带宽
sudo ksubdomain verify -d subdomains.txt -b 5m -o alive.txt

# 配合 subfinder 验证
subfinder -d target.com -o subs.txt
sudo ksubdomain verify -d subs.txt --silent -o verified.txt

Phase 2: Enumeration mode

# 枚举子域名
sudo ksubdomain enum -d target.com -o results.txt

# 使用自定义字典
sudo ksubdomain enum -d target.com -f wordlist.txt -o results.txt

# 控制带宽和重试
sudo ksubdomain enum -d target.com -b 10m --retry 3 -o results.txt

Phase 3: Advanced options

# 自定义 DNS 解析器
sudo ksubdomain verify -d subs.txt -r resolvers.txt

# 静默输出
sudo ksubdomain verify -d subs.txt --silent

# 高带宽(内网环境)
sudo ksubdomain enum -d target.com -b 1g -o results.txt