Subhunt enumerates subdomains using passive sources such as certificate transparency records.
Open source
9 alternativesdnsx
dnsx provides a fast DNS reconnaissance toolkit for resolving records and collecting DNS information from domains.
About dnsx
dnsx is a command-line DNS toolkit for resolving hostnames and running bulk DNS queries. It supports A, AAAA, CNAME, NS, MX, TXT, SRV, SOA, PTR, ANY, AXFR and CAA lookups, including a combined recon mode, and accepts user-supplied resolvers and domain or wordlist inputs for brute-force enumeration.
It provides automatic and manual wildcard filtering, stdin and stdout piping, and JSONL and templated output. Installation from source requires Go 1.21, and operation uses command-line flags.
Key features
- Query A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA records
- Query ANY, AXFR, CAA records or all records in recon mode
- Use custom resolvers in TCP, UDP, DoH, and DoT formats
- Brute-force subdomains using domain and wordlist inputs
- Automatic and manual wildcard detection and filtering
- Write JSONL output with custom output templates
Best for: Users who need command-line bulk DNS resolution and enumeration with custom resolvers.
Good for
- Supports many DNS record types plus combined recon mode
- Supports custom resolvers in multiple formats
- Open-source repository with stdin and stdout piping support
Watch out for
- Requires Go 1.21 to install from source
- Stream mode disables wordlist, wildcard, stats and stop/resume
dnsx at a glance
- Category
- Privacy & Security › Website & URL Scanners
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
dnsx alternatives
Tools and sites you could use instead, ranked by how closely they match.
openSquat detects look-alike domains that resemble an organization’s legitimate domains, helping identify possible impersonation.
Open source
12 alternatives
Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
Open source
6 alternatives
DNSTwist detects lookalike domains used in homograph phishing, typosquatting, and brand impersonation.
Open source
9 alternatives
Discover subdomains and review DNS history through the Columbus subdomain discovery service.
Open sourcePick
7 alternatives
Who.is searches domain and website registration records, including WHOIS, RDAP, DNS, and related information.
Popular in Website & URL Scanners
Well-known listings from the same topic.
InfoSniperinfosniper.netRobtexrobtex.comQuantcastquantcast.comWeb Checkweb-check.as93.netFullHuntfullhunt.ioIPFingerPrintsipfingerprints.com
dnsx FAQ
What is required to install dnsx?
Go 1.21 is required, installed with: go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
How are custom resolvers supplied?
Use the -r / -resolver flag with a file or comma-separated list.
What record types can dnsx query?
A, AAAA, CNAME, NS, TXT, SRV, PTR, MX, SOA, ANY, AXFR and CAA, or all of them with -recon.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.