Brute Subdomains

This little script brute-subs.ps1 is used to brute force subdomain names. It takes a list of possible subdomains and does a DNS lookup - if successful it adds it to the output file.

By default it uses a list of subdomains I have collected over the years but you can feed it your own.

The default location of the subdomain list can be set at the beginning of the script.