# rbsec/dnscan

Repository: https://github.com/rbsec/dnscan
Canonical: https://ross.abutalabs.com/products/dnscan
Language: Python
License: GPL-3.0
License Family: copyleft
Last push: 2024-12-17T15:29:50+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 4921, "days_push": 624, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1277, forks 410 (observed 2026-08-28T04:04:13.264330+00:00)

## What it is
dnscan is a Python command-line tool that performs DNS subdomain enumeration using wordlists, attempting zone transfers first and falling back to recursive subdomain scanning. It supports IPv6, TLD scanning, custom resolvers, and ships with wordlists derived from tens of thousands of zone files.

## Use cases
- enumerate subdomains of a target domain
- try a DNS zone transfer against nameservers
- find subdomains during a penetration test
- scan a domain across all TLDs
- discover IPv6 AAAA records for subdomains
- recursively scan subdomains with a wordlist

## When to choose
- you need a fast, scriptable CLI for DNS subdomain enumeration
- you want built-in wordlists ranked by real-world zone file popularity
- you need zone transfer attempts, TLD scanning, or IPv6 support in one tool

## When to avoid
- you need a full web application security scanner rather than DNS enumeration
- you want a GUI or continuous monitoring solution
- you need passive subdomain discovery from certificate transparency logs

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, networking, cli
- domain: security, penetration-testing, networking
- platform: python, cli, windows
- tags: dns, subdomain-enumeration, reconnaissance, zone-transfer, wordlist, osint, command-line, linux, macos

## Member repositories
- rbsec/dnscan (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:13.264330+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:02:51.276845+00:00, confidence not recorded.
  - readme: https://github.com/rbsec/dnscan (fetched 2026-08-28T04:04:13.264330+00:00, sha e5c11f72ccc7)
- Data as of 2026-08-30T08:39:29.467469+00:00.