Skip to main content

Enumerate Subdomains

Noise Level: High

This module will aggressively try to find subdomains based on the given wordlist.

Configuration

ParameterDescriptionDefault
wordlistThe path to the wordlist to use for this module.Fallback to wordlist CLI argument
match_statusThe status codes to match.200-299,301,302,307,401,403,405,500

Example(s)

match_status

  • 200-299 -> All the successful responses
  • 200-299,401,403 -> All the successful responses, including unauthorized and forbidden