Skip to content
Subdomains5.7 KB

dnscan Subdomains Top 1000

The 1,000 most frequently observed subdomain labels curated by the dnscan project, ideal for fast, high-hit-rate subdomain brute-forcing.

View source
Size
5.7 KB
Category
Subdomains
Source
rbsec/dnscan
License
GPLv3
Recommended tools
ffufgobusteramassdnsxpuredns

Preview

First 15 entries. Download or copy the full list (5.7 KB) using the buttons above.

>head dns-dnscan-subdomains-1000.txt5.7 KB
www
mail
ftp
localhost
webmail
smtp
pop
ns1
webdisk
ns2
cpanel
whm
autodiscover
autoconfig
m

The 1,000 most frequently observed subdomain labels curated by the dnscan project, ideal for fast, high-hit-rate subdomain brute-forcing.

This list is geared toward DNS subdomain enumeration. It contains roughly 5.7 KB and pairs well with tools such as ffuf, gobuster, amass, dnsx, puredns. Pick the smallest list that fits your engagement: shorter lists are faster and quieter for online attacks, while larger lists give broader coverage for offline work where speed is less of a constraint.

You can copy the sample preview straight from this page, copy the entire list to your clipboard, or download the raw .txt file. The full list is served directly from its upstream source on GitHub.

Sourced from rbsec/dnscan and distributed under GPLv3. Only use wordlists against systems you are explicitly authorized to test.