skills.rest
wgpsec
wgpsecOFFICIAL
Explore all skills by this author →
Website𝕏@wgpsecGitHub

ksubdomain-brute

Performs stateless high-speed subdomain brute-forcing and verification using ksubdomain raw sockets.

1.7k|238|Updated Dec 7, 2019
Search Tags:#reconnaissance#pentest#DNS enumeration#subdomain verification#stateless scanning#ksubdomain#subdomain brute force
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill ksubdomain-brute
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ksubdomain-brute
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/ksubdomain-brute
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill ksubdomain-brute

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Traditional DNS brute-forcing tools are slow when validating or enumerating large subdomain lists. This Skill uses ksubdomain's stateless raw-socket packet sending to perform subdomain verification and enumeration at speeds roughly 10x faster than tools like dnsx.

Core Features & Use Cases

  • Verify Mode: Validate large lists of candidate subdomains for liveness, with bandwidth control and silent output options.
  • Enum Mode: Brute-force enumerate subdomains for a target domain using built-in or custom wordlists, with retry and bandwidth tuning.
  • Resolver Customization: Supply custom DNS resolver lists for controlled resolution behavior.
  • Use Case: After collecting passive subdomains with subfinder, pipe the list into ksubdomain verify mode to quickly confirm which hosts are alive before deeper reconnaissance.

Quick Start

Use ksubdomain to verify the subdomains in subs.txt for the target domain and write the live results to a file, running with sudo and a 5m bandwidth limit.

Frequently Asked Questions about ksubdomain-brute

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I brute-force subdomains with ksubdomain?▼

Run ksubdomain in enum mode with the target domain, for example: sudo ksubdomain enum -d target.com -o results.txt. You can supply a custom wordlist with -f and control bandwidth with -b.

How to verify a list of subdomains quickly?▼

Use ksubdomain verify mode: sudo ksubdomain verify -d subdomains.txt -o alive.txt. It sends stateless DNS packets via raw sockets, making it roughly 10x faster than tools like dnsx for bulk validation.

ksubdomain vs dnsx for subdomain verification?▼

ksubdomain operates statelessly using raw sockets, delivering much higher throughput than dnsx, but requires root privileges. dnsx is easier to run without elevated permissions and suits smaller lists.

Why does ksubdomain require root or sudo?▼

ksubdomain crafts and sends raw network packets directly through the network interface, which requires elevated privileges on Linux. Run it with sudo or as root, otherwise packet sending will fail.

How do I limit ksubdomain bandwidth usage?▼

Use the -b flag to set a bandwidth cap, such as -b 5m for 5 megabits or -b 1g for high-bandwidth internal networks. Combine with --retry to balance speed against packet loss.

Related Skills

Explore More Software Engineering Skills→
uphiagouphiago
1.1k

subdomain-enumeration

Discover registered subdomains via certificate transparency logs and public APIs.

Community
Advanced
RooseveltAdvisorsRooseveltAdvisors
1

Recon

Automate network reconnaissance for domains, IPs, and netblocks.

Community
Advanced
wgpsecwgpsec
1.6k

subdomain-deep

Enumerate subdomains via DNS brute-force, OSINT, and web crawling.

Official
Intermediate
AeonDaveAeonDave
15

sublist3r

Enumerate subdomains passively via OSINT sources with optional brute-force wordlists.

Community
Intermediate