Pre-made commands
Standard usage
dnsrecon -d {domain} -t std
Flags
| Flag | Description |
|---|
| -d | Target domain |
| -n | Domain server to use |
| -r | IP range for reverse lookup brute force |
| -t | Type of enumeration to perform |
Enumeration types
| Type | Description |
|---|
| std | SOA, NS, A, AAAA, MX and SRV. |
| rvl: | Reverse lookup of a given CIDR or IP range. |
| brt: | Brute force domains and hosts using a given dictionary. |
| srv: | SRV records. |
| axfr: | Test all NS servers for a zone transfer. |
| bing: | Perform Bing search for subdomains and hosts. |
| yand: | Perform Yandex search for subdomains and hosts. |
| crt: | Perform crt.sh search for subdomains and hosts. |
| snoop: | Perform cache snooping against all NS servers for a given domain, testing all with file containing the domains, file given with -D option. |
| tld: | Remove the TLD of given domain and test against all TLDs registered in IANA. |
| zonewalk: | Perform a DNSSEC zone walk using NSEC records. |
Useful Scripts
Useful bash script
#!/bin/bash