dnsrecon

> DNS enumeration tool.

Scan a domain and save the results to a SQLite database:

dnsrecon --domain {example.com} --db {path/to/database.sqlite}

Scan a domain, specifying the nameserver and performing a zone transfer:

dnsrecon --domain {example.com} --name_server {nameserver.example.com} --type axfr

Scan a domain, using a brute-force attack and a dictionary of subdomains and hostnames:

dnsrecon --domain {example.com} --dictionary {path/to/dictionary.txt} --type brt

Scan a domain, performing a reverse lookup of IP ranges from the SPF record and saving the results to a JSON file:

dnsrecon --domain {example.com} -s --json

Scan a domain, performing a Google enumeration and saving the results to a CSV file:

dnsrecon --domain {example.com} -g --csv

Scan a domain, performing DNS cache snooping:

dnsrecon --domain {example.com} --type snoop --name_server {nameserver.example.com} --dictionary {path/to/dictionary.txt}

Scan a domain, performing zone walking:

dnsrecon --domain {example.com} --type zonewalk

> This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).

-- Response ended

-- Page fetched on Fri May 17 17:21:51 2024