DNS-Helix 🧬

__/\\\\\\\\\\\\_____/\\\\\_____/\\\_____/\\\\\\\\\\\______________/\\\________/\\\__/\\\\\\\\\\\\\\\__/\\\______________/\\\\\\\\\\\__/\\\_______/\\\_        
 _\/\\\////////\\\__\/\\\\\\___\/\\\___/\\\/////////\\\___________\/\\\_______\/\\\_\/\\\///////////__\/\\\_____________\/////\\\///__\///\\\___/\\\/__       
  _\/\\\______\//\\\_\/\\\/\\\__\/\\\__\//\\\______\///____________\/\\\_______\/\\\_\/\\\_____________\/\\\_________________\/\\\_______\///\\\\\\/____      
   _\/\\\_______\/\\\_\/\\\//\\\_\/\\\___\////\\\___________________\/\\\\\\\\\\\\\\\_\/\\\\\\\\\\\_____\/\\\_________________\/\\\_________\//\\\\______     
    _\/\\\_______\/\\\_\/\\\\//\\\\/\\\______\////\\\________________\/\\\/////////\\\_\/\\\///////______\/\\\_________________\/\\\__________\/\\\\______    
     _\/\\\_______\/\\\_\/\\\_\//\\\/\\\_________\////\\\_____________\/\\\_______\/\\\_\/\\\_____________\/\\\_________________\/\\\__________/\\\\\\_____   
      _\/\\\_______/\\\__\/\\\__\//\\\\\\__/\\\______\//\\\____________\/\\\_______\/\\\_\/\\\_____________\/\\\_________________\/\\\________/\\\////\\\___  
       _\/\\\\\\\\\\\\/___\/\\\___\//\\\\\_\///\\\\\\\\\\\/_____________\/\\\_______\/\\\_\/\\\\\\\\\\\\\\\_\/\\\\\\\\\\\\\\\__/\\\\\\\\\\\__/\\\/___\///\\\_ 
        _\////////////_____\///_____\/////____\///////////_______________\///________\///__\///////////////__\///////////////__\///////////__\///_______\///__

by CypherNova

A lightning-fast DNS permutation scanner and resolver, built in Go for speed and efficiency.

---

Features

• High-Speed, Concurrent DNS Resolution: Utilizes goroutines to resolve thousands of domains per second.
• Advanced Permutation Generation: Creates new potential subdomains by inserting words, modifying numbers, and adding common prefixes (dev, staging, regions).
• Seed Validation (--pre-validate): Optionally pre-scans the initial list of domains to ensure permutations are only generated for valid, resolvable seeds.
• Session Resumption (--resume): Automatically saves the session on interruption (Ctrl+C) and allows you to resume exactly where you left off.
• anew-style Output: Intelligently merges new results with existing ones in the output file, creating a unique, sorted list every time.
• Rate-Limiting (-l): Configurable rate-limiting to prevent network blocking and ensure stability.
• Piped Input: Fully supports piped input from other command-line tools.

Installation

To install dns-helix, you'll need Go installed on your machine. Then, run the following command:

go install -v github.com/CypherNova1337/dns-helix@latest

Usage

Here are some examples of how to use dns-helix.

Basic Scan:

dns-helix -s path/to/subdomains.txt -w path/to/wordlist.txt -o path/to/results.txt

Advanced Scan with Pre-Validation (Recommended): This is the most efficient method for large, potentially noisy seed lists.

dns-helix -s path/to/subdomains.txt -w path/to/wordlist.txt -r path/to/resolvers.txt -o path/to/results.txt --pre-validate -l 1000 -t 200

Resume an Interrupted Scan:

dns-helix --resume path/to/resume-file.log -r path/to/resolvers.txt -o path/to/results.txt

Flag Breakdown

Flag	Description	Default
-s	Path to the subdomains file (optional, reads from stdin).
-w	Path to the wordlist file.	words.txt
-r	Path to the DNS resolvers file.	resolvers.txt
-o	Path to the output file.	resolved_subdomains.txt
-t	Number of concurrent DNS resolving threads.	100
-l	Max queries per second to send.	1000
--pre-validate	Pre-validate base domains before generating permutations.	false
--resume	Path to a resume file to continue a previous scan.

The Resolver List

While dns-helix will work with any resolver list, the quality of your resolvers is the single most important factor for achieving high performance.

This repository includes recommended_resolvers.txt, a curated list of globally recognized, high-performance public DNS servers. Using this small, curated list is highly recommended. Many publicly available resolver lists contain thousands of IPs, which is often unnecessary and counterproductive. These large lists are typically filled with slow, unreliable, or offline servers that cause the scan to time out and slow down dramatically.

For DNS discovery, quality is far more important than quantity.

dns-helix -s path/to/subdomains.txt -w path/to/wordlist.txt -r recommended_resolvers.txt -o path/to/results.txt