diff --git a/programming_and_scripting_for_cybersecurity/recon_scripts/dns-recon2.sh b/programming_and_scripting_for_cybersecurity/recon_scripts/dns-recon2.sh index c79a799..f662f82 100644 --- a/programming_and_scripting_for_cybersecurity/recon_scripts/dns-recon2.sh +++ b/programming_and_scripting_for_cybersecurity/recon_scripts/dns-recon2.sh @@ -2,5 +2,4 @@ # bruteforce subdomains # Use a wordlist of your choice. I am using dnscan's wordlist in this example -for domain in $(cat /usr/share/wordlists/dnscan/subdomains-100.txt); -do host $domain.h4cker.org;sleep 2;done | grep has | sort -u +for domain in $(cat /usr/share/wordlists/amass/fierce_hostlist.txt); do host $domain.h4cker.org; done | grep -v NXDOMAIN | sort -u