DNS Enumeration
Last updated
Last updated
host <website>
host -t mx <domain>
****************************************************Forward Lookup bruteforce for ip in $(cat list.txt); do host $; done where list.txt has all subdomain
Forward Lookup bruteforce for ip in $(seq 50 100); do host 38.100.193.$ip; done | grep -v "not found”
nslookup 10.10.10.13 will get domain name
dnsrecon -d -t axfr for dnszone transfer
dnsrecon -d -t axfr -n <server> can put ip address of machine
dnsrecon -d -t axfr -n 10.10.10.13
dnsrecon -d -D ~/list.txt -t brt for bruteforce
edit /etc/hosts
10.10.10.13 cronos.htb admin.cronos.htb ns1.cronos.htb www.cronos.htb
dig axfr <domain> @<server-ip or machine ip>
dig axfr friendzone.red @10.10.10.123