Enumeration - DNS

whois $URL

nslookup $URL

host $URL
host -t A $URL
host -t MX $URL
host -t TXT $URL
host -t CNAME $URL

host -l $URL ns1.$URL

dnsrecon -n $IP -d $URL

dnsrecon -n $IP -d $URL -t axfr

SUB=/usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
dnsrecon -d $URL -n $IP -D $SUB -t brt

SUB=/usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
gobuster dns -d nsa.gov -r $IP -w $

dig axfr @$IP example.com

dig @$IP chaos version.bind txt 
dig @$IP chaos hostname.bind txt 
dig @$IP chaos authors.bind txt 
dig @$IP chaos ID.server txt

dnsenum $URL
dnsenum --dnsserver $IP $URL

SUB=/usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
dnsenum --dnsserver $IP -f $SUB $URL