Shulou(Shulou.com)05/31 Report--

This article will explain in detail what DNSX refers to. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

DNSX

DNSX is a powerful multi-purpose DNS toolkit that runs very fast, not only allowing researchers to run multiple probes using the retryabledns library, but also allowing us to execute multiple DNS query requests by passing a user-provided list of parsers.

DNSX is based on dnsprobe, but DNSX also provides some new features and fixes a number of vulnerabilities tailored to a better user experience. In addition, DNSX provides a number of tags to help researchers better analyze, extract, control, and print processing results. Of course, we also provide DNS wildcard filtering to help researchers transfer results to shuffledns.

Function introduction

Provides a simple and practical interface to query DNS records

Support A, AAAA, CNAME, PTR, NS, MX, TXT, SOA

Automatic processing of wildcard subfields

Optimized and easy to use

Stdin and stdout support to work with other tools

Tool download

Researchers can use the following commands to clone the source code of the project locally:

Git clone https://github.com/projectdiscovery/dnsx.git tool installation source code installation

The installation of this tool is very simple. We can download the pre-built source code of the corresponding platform architecture directly from the [Realeses page] of the project. When the download is complete, use the tar command to extract the code, and then move it to the $PATH directory:

Download latest binary from https://github.com/projectdiscovery/dnsx/releases ▶ tar-xvf dnsx-linux-amd64.tar ▶ mv dnsx-linux-amd64 / usr/local/bin/dnsx ▶ dnsx- hGo installation

DNSX requires the local device to install the Go v1.14 + environment, and then run the following command to get the project:

▶ GO111MODULE=on go get-u-v github.com/projectdiscovery/dnsx/cmd/dnsxGitHub install git clone https://github.com/projectdiscovery/dnsx.git; cd dnsx/cmd/dnsx; go build; mv dnsx/ usr/local/bin/; dnsx-version tool using dnsx-h

The above command displays help for the tool, and here are all the feature options supported by the tool:

Parameters.

Description

Sample

A

Query A record

Dnsx-a

Aaaa

Query AAAA record

Dnsx-aaaa

Cname

Query CNAME record

Dnsx-cname

Ns

Query NS record

Dnsx-ns

Ptr

Query PTR record

Dnsx-ptr

Txt

Query TXT record

Dnsx-txt

Mx

Query MX record

Dnsx-mx

Soa

Query SOA record

Dnsx-soa

Raw

Similar to dig

Dnsx-raw

L

A file containing a list of subdomain names / hosts

Dnsx-l list.txt

Json

JSON output

Dnsx-json

R

File or comma delimited parser

Dnsx-r 1.1.1.1

Rl

DNS request limit / second

Dnsx-rl 100

Resp

Display response data

Dnsx-cname-resp

Resp-only

Show only response data

Dnsx-cname resp-only

Retry

DNS entry data

Dnsx-retry 1

Silent

Only the results are displayed in the output

Dnsx-silent

O

Write output to a file (optional)

Dnsx-o output.txt

T

Concurrent threads to be generated

Dnsx-t 250

Verbose

Verbose output

Dnsx-verbose

Version

Show DNSX version

Dnsx-version

Wd

Wildcard domain name for filtering

Dnsx-wd example.com

Wt

Wildcard filter threshold

Dnsx-wt 5

Tool running

DNSX can be used to filter subdomain names in the list to filter out invalid records, such as:

▶ subfinder-silent-d hackerone.com | dnsx _ | | _\ / _'| |'_\ / _ |\ / | (_ | | | _ _ / /\ _ /\ _\ v1.0 projectdiscovery.io [WRN] Use with caution. You are responsible for your actions [WRN] Developers assume no liability and are not responsible for any misuse or damage. A.ns.hackerone.comwww.hackerone.comapi.hackerone.comdocs.hackerone.commta-sts.managed.hackerone.commta-sts.hackerone.comresources.hackerone.comb.ns.hackerone.commta-sts.forwarding.hackerone.comevents.hackerone.comsupport.hackerone.com

DNSX can be used to extract A records from a given subdomain name list, such as:

▶ subfinder-silent-d hackerone.com | dnsx-silent-a-resp a.ns.hackerone.com [162.159.0.31] b.ns.hackerone.com [162.159.1.31] mta-sts.hackerone.com [185.199.108.153] events.hackerone.com [208.100.11.134] mta-sts.managed.hackerone.com [185.199.108.153] resources.hackerone.com [52.60.160.16] resources.hackerone.com [52.60 . 165.183] www.hackerone.com [104.16.100.52] support.hackerone.com [104.16.53.111]

DNSX can be used to extract CNAME records from a list of given subdomains, such as:

▶ subfinder-silent-d hackerone.com | dnsx-silent-cname-resp support.hackerone.com [hackerone.zendesk.com] resources.hackerone.com [read.uberflip.com] mta-sts.hackerone.com [hacker0x01.github.io] mta-sts.forwarding.hackerone.com [hacker0x01.github.io] events.hackerone.com [whitelabel.bigmarker.com]

DNSX can extract a subdomain name from a given network scope. Here, you need to use PTR query, such as:

Mapcidr-cidr 173.0.84.0 mapcidr 24-silent | dnsx-silent-resp-only-ptr cors.api.paypal.comtrinityadminauth.paypal.comcld-edge-origin-api.paypal.comappmanagement.paypal.comsvcs.paypal.comtrinitypie-serv.paypal.comppn.paypal.compointofsale-new.paypal.compointofsale.paypal.comslc-a-origin-pointofsale.paypal.comfpdbs.paypal.com wildcard filtering

A special feature of DNSX is that it can handle DNS-based multi-level wildcards and requires very few DNS requests. Sometimes, if all subdomain names are resolved, this will result in a large amount of invalid data in the result. When DNSX solves this problem, it will track how many subdomains point to an IP address, and if the number of subdomains increases above a certain threshold, it will iteratively check the wildcards at all host levels of that IP address.

Dnsx-l airbnb-subs.txt-wd airbnb.com-o output.txt tool uses screenshots

This is the end of the article on "what does DNSX mean?". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.