dnsmap – DNS Network Mapper

dnsmap is a DNS reconnaissance tool used in Kali Linux for discovering subdomains associated with a target domain. It works by performing a dictionary-based brute-force attack on DNS records, helping penetration testers and security researchers uncover hidden subdomains that may not be publicly listed. This is useful for ethical hacking, information gathering, and vulnerability assessments. It is also a sub domain enumeration tool in Kali Linux.

dnsmap Tool Features

• Brute-force subdomain enumeration using a predefined wordlist.
• Helps in discovering hidden domains and subdomains.
• Supports wildcard resolution detection.
• Generates a list of IP addresses associated with subdomains.
• Useful in reconnaissance for ethical hacking and cybersecurity research.

Basic Syntax of dnsmap

The general syntax of the dnsmap command is:

$ dnsmap <domain> [options]

Examples

To perform a basic subdomain enumeration on a target domain (e.g., example.com), use:

$ dnsmap example.com

To save the results into a file for further analysis:

$ dnsmap example.com -o output.txt

To use a custom wordlist for more targeted results:

$ dnsmap example.com -w /path/to/wordlist.txt

The tool enables to discover all subdomains associated to a given domain.
For example : example.com,
it is possible to discover subdomains like :

• images.example.com,
• staging.example.com,
• help.example.com, etc.

dnsmap is a simple yet effective tool for gathering DNS-related intelligence. By identifying hidden subdomains, security professionals can gain deeper insights into a target’s infrastructure, making it an essential tool for penetration testing and reconnaissance.