puredns

puredns copied to clipboard

subdomain names frequently have patterns of various kinds. Doing initial pass at the name discovery would produce an initial subdomain list. Searching thought that list and recognizing those patterns would enable you to use these patterns as an anchor for second brut-forcing round.