boy-hack/ksubdomain

Health v2 · maintenance only

Adoption not part of the score

1212 stars · 162 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

KSubdomain is a fast, stateless subdomain enumeration and DNS verification tool written in Go. It uses raw sockets via pcap to bypass the kernel network stack, achieving extremely high DNS query throughput with low memory usage.

Use cases

• enumerate subdomains of a domain
• verify whether a list of domains resolves
• fast DNS brute-forcing for bug bounty recon
• discover DNS assets at large scale
• pipe resolved domains into other recon tools
• filter wildcard DNS responses during enumeration

When to choose

• you need to enumerate or verify very large subdomain lists quickly
• you want lower memory usage and higher speed than massdns or dnsx
• you need cross-platform support (Windows, Linux, macOS)
• you want adaptive timeouts and multi-NIC concurrent sending

When to avoid

• you only need occasional DNS lookups for a handful of domains
• you cannot run with root / CAP_NET_RAW privileges
• you need full DNS record analysis rather than existence checks
• your environment blocks raw socket or pcap packet injection

Facets

cli-tool · maturity active

search-engine networking cli developer-tools security osint networking windows cli subdomain-enumeration dns-bruteforce bugbounty recon pcap stateless-scanning hacker-tools command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="boy-hack/ksubdomain")