A simple lightweight domain enumerator Perl script for enumerating subdomains of a given domain using a wordlist.
This tool reads a list of potential subdomains from a file and checks if they resolve to valid DNS records for the specified domain. It is useful for discovering subdomains during security assessments or reconnaissance.
Usage
Point the script at a target domain with a wordlist of candidate subdomains:
perl donmain.pl -d example.com -w subdomains.txtIt resolves each candidate against DNS and reports the subdomains that return valid records — a quick win during the reconnaissance phase of a security assessment.
Features
- Wordlist-driven enumeration — supply your own candidate list of subdomains.
- DNS resolution checks — reports only subdomains that resolve to valid records.
- Lightweight — a single Perl script with no heavy dependencies.
- Recon-friendly — a fast first pass before deeper scanning.
A note on scope
Subdomain enumeration is a reconnaissance technique. Use it only against domains you are authorized to test — for your own assets, authorized engagements, or bug-bounty programs that explicitly permit it.