From 5f18a79611f8ca5eba10d5c86eca25e760a48a9c Mon Sep 17 00:00:00 2001 From: Jieyab89 Date: Sun, 28 Jun 2026 10:09:50 +0700 Subject: [PATCH] add more domain also add notes --- .../Domain_tld_enum.py | 39 +++++++++++++++---- Script/Web-TLD-Enumerate-NS-Check/Readme.md | 10 +++++ 2 files changed, 41 insertions(+), 8 deletions(-) diff --git a/Script/Web-TLD-Enumerate-NS-Check/Domain_tld_enum.py b/Script/Web-TLD-Enumerate-NS-Check/Domain_tld_enum.py index ab58322..017aa18 100644 --- a/Script/Web-TLD-Enumerate-NS-Check/Domain_tld_enum.py +++ b/Script/Web-TLD-Enumerate-NS-Check/Domain_tld_enum.py @@ -81,7 +81,7 @@ COMMON_TLDS = [ # Startup "io","ai","app","dev","tech","cloud", - "software","systems","digital","network", + "software","digital","network", "security","email","tools", # Business @@ -112,7 +112,7 @@ COMMON_TLDS = [ # Southeast Asia "sg","my","th","vn","ph", - "bn","kh","la","mm","cn", + "bn","kh","mm","cn", # East Asia "jp","kr","tw","hk","mo", @@ -154,7 +154,7 @@ COMMON_TLDS = [ "top","vip","icu","monster", "buzz","click","link","win", "fun","quest","su","st","cx", - "ax","gd","im","as","pet","town", + "ax","mu","im","as","pet","town", "sc","tk","ml","ga","cf","gq", "nu","cool","re","wf","tf", "pm","yt","nf","hn","moe","sx", @@ -163,7 +163,7 @@ COMMON_TLDS = [ "rs","host","lol","ng","wtf","xxx", "ee","party","bot","ooo","cat","tx", "ovh","codes","trade","cfd","men","do", - "best","ninja","pp.ua","ie","city", + "best","ninja","pp.ua","city", "rocks","bar","dog","run","red","ink", "service","services","family","works","work", "gay","buz","buzz","coffe","bio","toys", @@ -175,25 +175,48 @@ COMMON_TLDS = [ "recipes","audio","help","land","coach","guide", "foundation","er","watch","delivery","fund","gold", "cyou","computer","express","institute","reviews", - "ventures","date","press","loan","ci","casino","band", + "ventures","date","loan","ci","casino","band", "hg","ag","bet","ing","racing","game","kim","rest","vet", "af","tips","tax","wine","cv","cards","pink","earth","sex", "pics","cam","parts","part","fail","ge","ski","fe","mom", "eco","law","gy","baby","porn","vg","sucks","mc","duns", - "srt","sbs","atas","zip","surf","llc", + "srt","sbs","atas","zip","surf","llc","ao","black","moda", + "sexy","gratis","claims","voyage","ke","gl","camp","exposed", + "diamonds","ht","je","lc","wang","meme","box","moi","spot", # China "ren","shouji","tushu","wanggou","weibo","xihuan","xin", + + # Israel + "il" # Additional modern gTLD "team", "global", "care", "social", "video", "chat", "academy", "training", "events", "marketing", "exchange", "international", "technology","rock","art", - "stream","games","sciene","ac","mobi","guru", + "stream","games","sciene","mobi","guru", "com.au","bid","travel","plus","systems","edu", "co.in","domain","photography","expert","tube", - "arpa","abc", + "arpa","abc","asia","domains","boats","bike", + "faith","fish","bingo","irish","homes","solar", + "flights","industries","fan","gmbh","rich","hiv", + "nexus","mex.com","lotto","co.gg","rsvp","whoswho", + "info.ec","google","co.ve","kiwi.nz","idv.tw", + "law.pro","reit","jur.pro","bar.pro","zuerich", + "acct.pro","nom.pe","waw.pl","pro.ec","web.ve", + + # JP + "みんな","jpn.com", + + # Hongkong + "网络", + + # TEST ASIA + "ac","az","bh","bn","bt", + "iq","ir","jo","kg","kp", + "kw","kz","lb","mn","mv","om", + "ps","sy","tj","tl","tm","uz","ye", ] def generate_brute_tlds(max_len=3, min_len=1): diff --git a/Script/Web-TLD-Enumerate-NS-Check/Readme.md b/Script/Web-TLD-Enumerate-NS-Check/Readme.md index 8d3d402..1792305 100644 --- a/Script/Web-TLD-Enumerate-NS-Check/Readme.md +++ b/Script/Web-TLD-Enumerate-NS-Check/Readme.md @@ -1,5 +1,15 @@ # Tutorial +## Tips + +Tips surface web tld domain enumeration: + +If you have tried dorking but cannot find the target on the web, try a brute-force approach—similar to an email permutator, but applied to domain TLDs. What can you do? You can use the script below to parse domain extensions and perform a brute-force search. If that fails, try combining it with other search parameters—such as country of origin, language, username, or other indicators that could serve as clues—and then attempt to brute-force the extensions again, testing them either as double or single domain extension. It is possible that the site is not indexed and the developer has implemented strict controls for indexing bots, making it difficult to find. Try using a brute-force approach and adjust your search parameters or context + +A second method is to perform a reverse IP lookup, provided you have identified the domains or IP addresses you wish to investigate. Check to see if there are any similarities to your target; if you are looking for new leads, try performing a reverse IP lookup + +Third. After identifying a domain or IP address, try enumerating it using data aggregators like Censys, Shodan, or VirusTotal. Check the asset information and WHOIS history; you might uncover new information + ## Reccon tld common domain ```