subscan 1.3.0

A subdomain enumeration tool leveraging diverse techniques, designed for advanced pentesting operations
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

# `brute`

With this command you can use the brute force technique to discover subdomains on a domain

## Argument List

All arguments below can be used with the `brute` command, [see here](#common-use-cases) for common use cases

| Name                     | Short |                   Description                    |
| :----------------------- | :---: | :----------------------------------------------: |
| `--domain`               | `-d`  |           Target domain to be scanned            |
| `--wordlist`             | `-w`  |      Wordlist file to be used during attack      |
| `--print`                |       |     If sets, output will be logged on stdout     |
| `--stream-to-txt`        | `-s`  | Optional `txt` file to create file stream for the subdomains that found. If sets the `--output` parameter will be disabled |
| `--output`               | `-o`  | Set output format (`txt`, `csv`, `json`, `html`) |
| `--resolver-timeout`     |       |               IP resolver timeout                |
| `--resolver-concurrency` |       |         IP resolver concurrency level            |
| `--help`                 | `-h`  |                    Print help                    |

## Common Use Cases

- Run a basic brute force attack with default settings

  ```bash
  ~$ subscan brute -d example.com -w wordlist.txt
  ```

- Increase resolver concurrency to improve attack speed

  ```bash
  ~$ subscan brute -d example.com -w wordlist.txt --resolver-concurrency 200
  ```

- Fine-tune IP address resolver component according to your network

  ```bash
  ~$ subscan brute -d example.com -w wordlist.txt --resolver-timeout 1 --resolver-concurrency 100
  ```

- Skip creating a report and print results directly to `stdout`

  ```bash
  ~$ subscan brute -d example.com -w wordlist.txt --print
  ```