diff --git a/pages/linux/dnsrecon.md b/pages/linux/dnsrecon.md new file mode 100644 index 0000000000..b3f897a6f2 --- /dev/null +++ b/pages/linux/dnsrecon.md @@ -0,0 +1,32 @@ +# dnsrecon + +> DNS enumeration tool. +> More information: . + +- Scan a domain and save the results to a SQLite database: + +`dnsrecon --domain {{example.com}} --db {{path/to/database.sqlite}}` + +- Scan a domain, specifying the nameserver and performing a zone transfer: + +`dnsrecon --domain {{example.com}} --name_server {{nameserver.example.com}} --type axfr` + +- Scan a domain, using a dictionary of subdomains and hostnames for bruteforcing: + +`dnsrecon --domain {{example.com}} --dictionary {{path/to/dictionary.txt}} --type brt` + +- Scan a domain, performing a reverse lookup of IP ranges from the SPF record and saving the results to a JSON file: + +`dnsrecon --domain {{example.com}} -s --json` + +- Scan a domain, performing a Google enumeration and saving the results to a CSV file: + +`dnsrecon --domain {{example.com}} -g --csv` + +- Scan a domain, performing DNS cache snooping: + +`dnsrecon --domain {{example.com}} --type snoop --name_server {{nameserver.example.com}} --dictionary {{path/to/dictionary.txt}}` + +- Scan a domain, performing zone walking: + +`dnsrecon --domain {{example.com}} --type zonewalk`