storenth / pnk Goto Github PK

ds-r2-ae0-171.tcsbank.ru split to ['ds-r', '2', '-ae', '0', '-171'], so ['-171'] int parsed (eq 171) and point us to ds-r2-ae0.tcsbank.ru because unhandled.

There is open question, do we need altdns \ dnsgen like functionality for this tool based on wordlist?

• replace each subs with word in wordlist: test.v2.domain.com -> demo.v2.domain.com
• prepend/append word by creating new subs: test.domain.com -> demo.test.domain.com, test.demo.domain, etc

Feature request:

  -w WORDLIST, --wordlist WORDLIST
                        wordlist file to mixed with subdomains

Pros:

• All in one tool

Cons:

• Heavy stuff: even for 10 words for 1 subdomain it is minimum 10x combinations based on replacement and 10x2 based on prepend-append actions for each subdomain, so in the average case is about C(n,k).
• Large size of memory used in case of storing stdout in a file
• Duplicated features of known bruteforce based subdomain enumeration tools