https://github.com/darkoperator/dnsrecon

DNS Enumeration Script
https://github.com/darkoperator/dnsrecon

Last synced: 5 days ago
JSON representation

DNS Enumeration Script

• Host: GitHub
• URL: https://github.com/darkoperator/dnsrecon
• Owner: darkoperator
• License: gpl-2.0
• Created: 2010-12-16T03:25:49.000Z (over 14 years ago)
• Default Branch: master
• Last Pushed: 2025-04-07T05:13:55.000Z (8 days ago)
• Last Synced: 2025-04-10T00:12:24.936Z (5 days ago)
• Language: Python
• Homepage:
• Size: 1.26 MB
• Stars: 2,747
• Watchers: 95
• Forks: 554
• Open Issues: 11
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-termux-hacking - dnsrecon - DNS Enumeration Script.[](https://github.com/darkoperator/dnsrecon/stargazers/) (Uncategorized / Uncategorized)
• starred-awesome - dnsrecon - DNS Enumeration Script (Python)
• awesome-hacking-lists - darkoperator/dnsrecon - DNS Enumeration Script (Python)
• awesome-cyber-security - DNSRecon - A DNS reconnaissance tool that performs various DNS enumeration techniques. (Tools / Network Pentesting)
• awesome-cyber-security - DNSRecon - A DNS reconnaissance tool that performs various DNS enumeration techniques. (Tools / Network Pentesting)

README

        

# DNSRecon

DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. 

This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a security assessment and network troubleshooting. 

This script provides the ability to perform:

* Check all NS Records for Zone Transfers.

* Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT).

* Perform common SRV Record Enumeration.

* Top Level Domain (TLD) Expansion.

* Check for Wildcard Resolution.

* Brute Force subdomain and host A and AAAA records given a domain and a wordlist.

* Perform a PTR Record lookup for a given IP Range or CIDR.

* Check a DNS Server Cached records for A, AAAA and CNAME Records provided a list of host records in a text file to check.

# Python Version

DNSRecon requires python3.6+