dnsx

A fast and multi-purpose DNS toolkit to run multiple DNS queries. tldr-pages

On several platforms

Several platforms

A fast and multi-purpose DNS toolkit to run multiple DNS queries. Note: Input to dnsx needs to be passed through stdin (pipe |) in some cases.

Query the A record of a (sub)domain and show response received

echo example.com | dnsx -a -respIdentify

Query all the DNS records (A, AAAA, CNAME, NS, TXT, SRV, PTR, MX, SOA, AXFR, CAA)

dnsx <<<example.com -recon -respIdentify

Query a specific type of DNS record

echo example.com | dnsx -resp -aIdentify

Output response only (do not show the queried domain or subdomain)

echo example.com | dnsx -resp-onlyIdentify

Display raw response of a query, specifying resolvers to use and retry attempts for failures

echo example.com | dnsx -debug -resolver 1.1.1.1,8.8.8.8,... -retry numberIdentify

Brute force DNS records using a placeholder

dnsx -domain FUZZ.example.com -wordlist path/to/wordlist.txt -respIdentify

Brute force DNS records from a list of domains and wordlists, appending output to a file with no color codes

dnsx -domain path/to/domain.txt -wordlist path/to/wordlist.txt -resp -output path/to/output.txt -no-colorIdentify

Extract CNAME records for the given list of subdomains, with rate limiting DNS queries per second

subfinder -silent -domain example.com | dnsx -cname -resp -rate-limit numberIdentify