Forrest logo
back to context overview

dnsrecon

List of commands for dnsrecon:

  • dnsrecon:tldr:130ad dnsrecon: Scan a domain, using a brute-force attack and a dictionary of subdomains and hostnames.
    $ dnsrecon --domain ${example-com} --dictionary ${path-to-dictionary-txt} --type brt
    try on your machine
    explain this command
  • dnsrecon:tldr:145b0 dnsrecon: Scan a domain, performing DNS cache snooping.
    $ dnsrecon --domain ${example-com} --type snoop --name_server ${nameserver-example-com} --dictionary ${path-to-dictionary-txt}
    try on your machine
    explain this command
  • dnsrecon:tldr:6f32b dnsrecon: Scan a domain, specifying the nameserver and performing a zone transfer.
    $ dnsrecon --domain ${example-com} --name_server ${nameserver-example-com} --type axfr
    try on your machine
    explain this command
  • dnsrecon:tldr:84655 dnsrecon: Scan a domain, performing zone walking.
    $ dnsrecon --domain ${example-com} --type zonewalk
    try on your machine
    explain this command
  • dnsrecon:tldr:ba008 dnsrecon: Scan a domain, performing a reverse lookup of IP ranges from the SPF record and saving the results to a JSON file.
    $ dnsrecon --domain ${example-com} -s --json
    try on your machine
    explain this command
  • dnsrecon:tldr:da6c3 dnsrecon: Scan a domain and save the results to a SQLite database.
    $ dnsrecon --domain ${example-com} --db ${path-to-database-sqlite}
    try on your machine
    explain this command
  • dnsrecon:tldr:da9da dnsrecon: Scan a domain, performing a Google enumeration and saving the results to a CSV file.
    $ dnsrecon --domain ${example-com} -g --csv
    try on your machine
    explain this command
back to context overview