Knockpy

Subdomain scanner via brute force + sources.

KaliParrotlow

pkg: knockpy

Knockpy enumerates subdomains using a wordlist and online sources, reporting live hosts and details.

Syntax

knockpy {domain}

Example

knockpy target.tld

Brute-forces and resolves subdomains for the domain.

Advantages
  • Simple subdomain discovery
  • Resolves + reports status
Disadvantages
  • Brute force is active
  • Slower than passive tools
Tags
#subdomains

Official docs: Knockpy

Related commands

Frequently asked questions

What is Knockpy used for?
Knockpy enumerates subdomains using a wordlist and online sources, reporting live hosts and details.
What is an example Knockpy command?
A common example is: knockpy target.tld — Brute-forces and resolves subdomains for the domain.
Is Knockpy part of Kali Linux?
Yes. Knockpy ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install knockpy.
What category of security tool is Knockpy?
Knockpy is a Information Gathering tool with a low-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →