Skip to content

Instantly share code, notes, and snippets.

@Zobber
Forked from ehsahil/nmap.txt
Created October 19, 2025 20:32
Show Gist options
  • Select an option

  • Save Zobber/9993fb1aa9176ad6d0d6ca463134446a to your computer and use it in GitHub Desktop.

Select an option

Save Zobber/9993fb1aa9176ad6d0d6ca463134446a to your computer and use it in GitHub Desktop.
#Finding subdomains via Nmap.
nmap --script dns-brute --script-args dns-brute.domain=domain.com,dns-brute.threads=6,dns-brute.hostlist=./sub1000.lst
nmap --script dns-brute --script-args dns-brute.domain=domain.com,dns-brute.threads=6,dns-brute.hostlist=./sub10000.lst
nmap --script dns-brute --script-args dns-brute.domain=domain.com,dns-brute.threads=6,dns-brute.hostlist=./sub100000.lst
nmap --script dns-brute --script-args dns-brute.domain=domain.com,dns-brute.threads=6,dns-brute.hostlist=./sub1000000.lst
#Wordlist :
1. sub1000.lst - https://drive.google.com/open?id=0B0h-Dh0Oss1zOGFqVVl1bTVpdWc
2. sub10000.lst - https://drive.google.com/open?id=0B0h-Dh0Oss1zTTdmQnZsQ0JCYzA
3. sub100000.lst - https://drive.google.com/open?id=0B0h-Dh0Oss1zdDBFT1dCc08ya0U
4. sub1000000.lst - https://drive.google.com/open?id=0B0h-Dh0Oss1zODNfSG1sbVJ1WE0
In case above links are not available : https://github.com/ehsahil/wordlists-for-nmap
#Taken from http://blog.x1622.com/2016/11/subdomain-discovery-with-nmap-and.html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment