Enumeration dns
whois
nslookup
host
zone transfer
dnsrecon
zone transfer subdomain enumeration
SUB=/usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
dnsrecon -d $URL -n $IP -D $SUB -t brt
gobuster
subdomain enumeration
SUB=/usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
gobuster dns -d nsa.gov -r $IP -w $
dig
zone transfer
dig chaos*dig @$IP chaos version.bind txt
dig @$IP chaos hostname.bind txt
dig @$IP chaos authors.bind txt
dig @$IP chaos ID.server txt
dnsenum
subdomain enumeration
SUB=/usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
dnsenum --dnsserver $IP -f $SUB $URL
links
- https://nip.io
- https://whois.domaintools.com
- https://viewdns.info
- https://threatintelligenceplatform.com
- http://ptrarchive.com/
- https://lookup.icann.org/lookup