dnsenum

Full DNS enumeration: records, zone transfer and brute force.

Automates the whole DNS enumeration of a domain in one pass: A, MX, NS and TXT records, a **zone transfer** (AXFR) attempt against every name server, dictionary brute force of subdomains and reverse lookups of the ranges it finds. It is the tool to run when the target exposes port 53: if a single name server allows AXFR, it hands over the entire internal network map with no further effort.

Family Recon, DNS & OSINT

Flags --enum -f --dnsserver --threads

Concepts DNS zone transfer (AXFR), Virtual Host Fuzzing

Cheatsheet DNS · 53

Installation

sudo apt install -y dnsenum

Useful commands3 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.