# boy-hack/ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

Repository: https://github.com/boy-hack/ksubdomain
Canonical: https://ross.abutalabs.com/products/boy-hack-ksubdomain
Language: Go
License: MIT
License Family: permissive
Topics: subdomain, hacker-tools, bugbounty
Last push: 2026-03-27T01:47:12+00:00

## Health v2 (maintenance only)
Score: 68/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 74, release rhythm 42, longevity 100
- inputs: {"age_days": 1774, "days_push": 160, "days_rel": 384, "gap_med": 0, "n_releases_24m": 8}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1212, forks 162 (observed 2026-08-28T04:04:00.312709+00:00)

## What it is
KSubdomain is a fast, stateless subdomain enumeration and DNS verification tool written in Go. It uses raw sockets via pcap to bypass the kernel network stack, achieving extremely high DNS query throughput with low memory usage.

## Use cases
- enumerate subdomains of a domain
- verify whether a list of domains resolves
- fast DNS brute-forcing for bug bounty recon
- discover DNS assets at large scale
- pipe resolved domains into other recon tools
- filter wildcard DNS responses during enumeration

## When to choose
- you need to enumerate or verify very large subdomain lists quickly
- you want lower memory usage and higher speed than massdns or dnsx
- you need cross-platform support (Windows, Linux, macOS)
- you want adaptive timeouts and multi-NIC concurrent sending

## When to avoid
- you only need occasional DNS lookups for a handful of domains
- you cannot run with root / CAP_NET_RAW privileges
- you need full DNS record analysis rather than existence checks
- your environment blocks raw socket or pcap packet injection

## Facets
- artifact type: cli-tool
- maturity: active
- function: search-engine, networking, cli, developer-tools
- domain: security, osint, networking
- platform: windows, cli
- tags: subdomain-enumeration, dns-bruteforce, bugbounty, recon, pcap, stateless-scanning, hacker-tools, command-line, linux, macos

## Member repositories
- boy-hack/ksubdomain (main) score 68

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:00.312709+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:17:59.116606+00:00, confidence not recorded.
  - readme: https://github.com/boy-hack/ksubdomain (fetched 2026-08-28T04:04:00.312709+00:00, sha b70f41d14569)
- Data as of 2026-08-30T08:39:29.467469+00:00.