h4cker/useful_commands_and_scripts/dns_recon.md

22 lines
616 B
Markdown
Raw Normal View History

2018-01-18 03:45:47 +00:00
# DNS Reconnassaince
## DNSRECON
* [dnsrecon](https://github.com/darkoperator/dnsrecon) - DNS Enumeration Script created by Carlos Perez (darkoperator)
Reverse lookup for IP range:
`./dnsrecon.rb -t rvs -i 10.1.1.1,10.1.1.50`
Retrieve standard DNS records:
`./dnsrecon.rb -t std -d example.com`
Enumerate subdornains:
`./dnsrecon.rb -t brt -d example.com -w hosts.txt`
DNS zone transfer:
`./dnsrecon -d example.com -t axfr`
## Parsing NMAP Reverse DNS Lookup
`nmap -R -sL -Pn -dns-servers dns svr ip range | awk '{if( ($1" "$2" "$3)=="NMAP scan report")print$5" "$6}' | sed 's/(//g' | sed 's/)//g' dns.txt `