internal/

Package ct looks up subdomain names in Certificate Transparency logs through crt.sh (#130).

Package dns resolves candidate names, classifies lookup outcomes, detects wildcard zones, paces queries and simulates resolution for -simulate.

Package dnsserver is a scriptable local DNS server (#67).

Package dnstest runs internal/dnsserver for hermetic tests (#67): servers stop on test cleanup, and failures to listen fail (or, for IPv6, skip) the test.

Package labzone parses -simulate-zone scenario files (#76).

Package output renders scan results (text, JSON, JSONL, CSV) to stdout and the -o file, and serializes progress and diagnostics on stderr.

Package permute generates second-pass candidates from names a scan has already found (#72): api.example.com suggests api-dev, dev-api, dev.api, api2 and so on, the names most likely to exist next to a known one.

Package report builds the run-quality report (#70) from finished scans.

Package scan runs a subdomain scan: it validates options, dispatches candidate names to a worker pool, filters wildcard answers and reports results and statistics as events.

Package tui provides a Bubble Tea terminal UI for subenum.

Package validate holds input validators shared by the CLI and the TUI so the two entry points enforce identical domain and DNS server rules.

Package wordlist reads wordlist files and normalizes their entries into the DNS labels a scan queries.