ToolsFebruary 9, 20261 min readby 0xt0pus

DNSenum

DNS enumeration tool for discovering subdomains, zone transfers, and DNS records


dnsenum

Description

A DNS enumeration tool that gathers information about a domain including host addresses, nameservers, MX records, and can perform brute-force subdomain discovery using wordlists. It automates the process of collecting DNS-related information during reconnaissance.

Usage 1: Basic DNS Enumeration

Run dnsenum against a target domain to gather all available DNS information.

Command:

dnsenum domain.com

Usage 2: DNS Enumeration (Alternate Example)

Enumerate DNS records for a specific target domain.

Command:

dnsenum megacorpone.com

Usage 3: Brute-Force DNS Names with a Wordlist

Use a wordlist to brute-force subdomains for the target domain.

Command:

dnsenum domain.com -f /wordlist.txt

Notes

  • Automatically discovers host addresses, nameservers, MX records, and more.
  • The -f flag specifies a wordlist file for brute-forcing subdomains.
  • Pre-installed on Kali Linux.