dnsrecon
DNS enumeration tool. tldr-pages
On Linux
Linux
Scan a domain and save the results to an SQLite database
dnsrecon --domain example.com --db path/to/database.sqliteIdentifyScan a domain, specifying the nameserver and performing a zone transfer
dnsrecon --domain example.com --name_server nameserver.example.com --type axfrIdentifyScan a domain, using a brute-force attack and a dictionary of subdomains and hostnames
dnsrecon --domain example.com --dictionary path/to/dictionary.txt --type brtIdentifyScan a domain, performing a reverse lookup of IP ranges from the SPF record and saving the results to a JSON file
dnsrecon --domain example.com -s --jsonIdentifyScan a domain, performing a Google enumeration and saving the results to a CSV file
dnsrecon --domain example.com -g --csvIdentifyScan a domain, performing DNS cache snooping
dnsrecon --domain example.com --type snoop --name_server nameserver.example.com --dictionary path/to/dictionary.txtIdentifyScan a domain, performing zone walking
dnsrecon --domain example.com --type zonewalkIdentify