~/Domain# █
Target Performs a basic DNS Query.
nslookup
Returns mails server within specified domain.
dig domain MX
Returns name servers within specified domain.
dig domain NS
Attempts a zone transfer from specified name server.
dig axfr @name_server domain
Attempts a zone transfer from specified name server.
dnsrecon -d domain -a --name_server server
Scans for DNS servers within specified network.
nmap -sU -p53 network
Attempts to brute forces subdomains of specified domain.
dnsmap domain
Automates domain enumeration. Performs zone transfer, subdomain brute force, and more.
perl fierce.pl -dns domain --dnsserver server
Automates domain enumeration.
dnsenum.pl domain