Altdns
Subdomain discovery via permutations
Recon & OSINT6 commands
#dns#permutation#subdomain#recon
Installation
1Install via pip or clone from GitHub
2Install Python dependencies
3Verify installation
# Using pip
pip install py-altdns
# Or from source
git clone https://github.com/infosec-au/altdns.git
cd altdns
pip install -r requirements.txt
# Verify
altdns --helpBasic Usage
Altdns generates subdomain permutations based on existing subdomains and a custom wordlist, then resolves them
# Generate and resolve permutations
altdns -i subdomains.txt -o data_output -w words.txt
# Custom resolvers
altdns -i subdomains.txt -o data_output -w words.txt -r resolvers.txt
# Screenshot output for found subdomains
altdns -i subdomains.txt -o data_output -w words.txt -s screenshot_outputCommand Reference
6 commands
1Input subdomains file
-i2Output data directory
-o3Permutation words file
-w4Custom resolvers file
-r5Screenshots output directory
-s6Thread count
-tWhen to Use
1
Discovering subdomains through common name patterns2
Finding admin/staging/dev subdomains via permutations3
Expanding a known subdomain list4
Bug bounty recon after passive enumerationNotes & Tips
1
Combines existing subdomains with wordlist to create permutations2
Examples: admin.example.com → dev-admin.example.com, admin-dev.example.com, etc.3
Results need validation with a resolver or httpx4
The wordlist determines permutation qualityCommon Errors & Solutions
No permutations generated
Ensure the input file has subdomains and the wordlist is not empty
Py-altdns not found after pip install
Use pip3 or install from source via git clone