tldr/pages/linux/dnsrecon.md
bl-ue 8ebd171d6f
*: fix typos reported by Hunspell (#5848)
Co-authored-by: marchersimon <50295997+marchersimon@users.noreply.github.com>
Co-authored-by: Seth Falco <seth@falco.fun>
Co-authored-by: Patrice Denis <patricedenis@users.noreply.github.com>
2021-05-20 16:13:41 -04:00

1.1 KiB

dnsrecon

DNS enumeration tool. More information: https://github.com/darkoperator/dnsrecon.

  • Scan a domain and save the results to a SQLite database:

dnsrecon --domain {{example.com}} --db {{path/to/database.sqlite}}

  • Scan a domain, specifying the nameserver and performing a zone transfer:

dnsrecon --domain {{example.com}} --name_server {{nameserver.example.com}} --type axfr

  • Scan a domain, using a brute-force attack and a dictionary of subdomains and hostnames:

dnsrecon --domain {{example.com}} --dictionary {{path/to/dictionary.txt}} --type brt

  • Scan a domain, performing a reverse lookup of IP ranges from the SPF record and saving the results to a JSON file:

dnsrecon --domain {{example.com}} -s --json

  • Scan a domain, performing a Google enumeration and saving the results to a CSV file:

dnsrecon --domain {{example.com}} -g --csv

  • Scan a domain, performing DNS cache snooping:

dnsrecon --domain {{example.com}} --type snoop --name_server {{nameserver.example.com}} --dictionary {{path/to/dictionary.txt}}

  • Scan a domain, performing zone walking:

dnsrecon --domain {{example.com}} --type zonewalk