What is domfind
A wargaming network for penetration testers to practice their skills in a realistic environment.
domfind: A Python 3.6.x Utility for Domain Name Testing
domfind is a utility designed for Python version 3.6.x. It checks whether specific domain names are available across various Top Level Domains (TLDs).
This is achieved by making a series of DNS requests
This process involves making a series of DNS requests for Start of Authority (SOA) records. It starts at the root servers and continues down through the parent domains until the final parent responds with either a SOA section or a NXDOMAIN response code. The NXDOMAIN response indicates that the input domain name does not exist. Local or public DNS resolvers are intentionally not utilized in this process to prevent the use of cached records.
Important Consideration Regarding DNS Queries
It is important to understand that the number of DNS queries executed increases in a linear fashion based on both the depth of the input domain and the total number of TLDs that need to be checked.
For example, sub1
sub2.domain.tld requires a total of three queries for each TLD.
The first one is directed...
The first request is sent to a root server, the second request is directed to a NS server of domain.tld, and the third and final request is aimed at sub2.domain.tld.
This utility helps in identifying malicious subdomains
This utility is designed to identify malicious subdomains that are registered under various top-level domains (TLDs) and may be utilized for phishing campaigns. Malicious actors frequently use the same domain name across related or subsequent campaigns to host their web servers. This can be proactively detected with domfind as a one-off process if the domain name is already known.
domfind Reviews
No reviews yet.
