Bug Bounty
Published in

Bug Bounty

Distributed Bruteforcing of DNS records

Using shuffleDNS/pureDNS + BBRF + Axiom

For this post I'll assume you have many programs loaded to your BBRF instance. If you don't run BBRF you can check this guide I wrote in how to install and use it.

One of the recurrent tasks you will need to perform is to find new assets in the scope of every program. We could use subfinder + assetfinder but those tools don't do DNS bruteforcing they are more into the category of scrappers.

It this case I will use the domain names already on my database as wordlist for…

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store