Shulou(Shulou.com)06/01 Report--

Dnsrecon

Introduction: dnsrecon is a tool that supports multithreading, burst, multiple DNS record queries, domain transfer vulnerability detection, IP range query, NS server cache detection, and results can be saved in multiple formats.

Syntax: dnsrecon.py

Options:

-h,-- help prints help and exits

-d,-- domain target domain name

-r,-- range explodes the IP range of the given format, either (start IP- end IP) or (range / mask).

-n,-- name_server specifies a domain name server

-D,-- subdomain name and host name dictionary file used by dictionary to explode

-f ignore enumerated domain search results when saving results

-t,-- type specifies the enumeration type:

Std if the domain transfer of the NS server fails, enumerate SOA, NS, A, AAAA, MX and SRV (the domain name must be specified with the-d parameter to use this parameter)

Rvl reverse lookups for a given IP range or CIDR (IP range must be specified with-r)

Brt uses the specified dictionary to break the domain name and hostname

Srv enumerates SRV records

Axfr conducts domain transfer tests on all NS servers

Goo performs Google search for subdomain names and host

Snoop performs DNS server cache detection on the files given by the-D option

Tld deletes the TLD for a given domain and tests all TLD registered in IANA

Zonewalk uses NSEC records for DNSSEC domain roaming

-a test of spatial domain transfer during standard enumeration

-s reverse lookup of IP address range during standard enumeration

-g Google enumeration in the process of standard enumeration

-w Deep whois query and IP reverse lookup in the process of standard enumeration

-z roaming the DNSSEC domain during standard enumeration

-- threads specifies the number of threads

-- lifetime specifies the time for the query to wait

-- db stores the result as a file in the sqlite3 database

-- xml stores the result as a file in XML format

-- iw still explodes even when wildcards are found

-c,-- files in csv CSV format

-j,-- json json file

-v shows the process of blasting

Practice 1: search for sub-domain names of domain names

Practice 2: reverse checking the domain name for a given IP range

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.