[dns-operations] dnsmap: subdomain bruteforcer for stealth enumeration (fwd)

[John Kristoff]

On Mon, 18 Sep 2006 16:46:51 -0500
John Kristoff <jtk at ultradns.net> wrote:

>   dict_file=$2
>   for each in `cat $dict_file`
>   do
>       host $each.$dom
>   done

OK fine, to be pedantic and cycle through all the word chars, that
section could be replaced with something like:

dict_file=$2
for word in `cat $dict_file`
do
    COUNT=1
    while [ $COUNT -lt `echo $word | wc -c | awk '{print $1}'` ]
    do
        LABEL=`echo $word | cut -c1-$COUNT | awk '{print $1}'`
        host $LABEL.$dom
        COUNT=`expr $COUNT + 1`
    done
done

John