DNSRecon – DNS Enumeration Tool

DNSRecon is a powerful DNS enumeration tool available in Kali Linux. It helps security professionals, penetration testers, and network administrators gather DNS-related information about a target domain. This information can be crucial for understanding the domain’s infrastructure and identifying potential vulnerabilities.

DNSRecon Features

Some of DNSRecon features are as follows:

• Performs standard DNS queries like A, AAAA, CNAME, MX, and TXT records.
• Supports brute-force subdomain enumeration.
• Performs Zone Transfer testing.
• Enumerates DNS cache snooping.
• Identifies DNS records from third-party sources.

Install DNSRecon

DNSRecon comes pre-installed in Kali Linux. However, if you need to install or update it, you can use the following command:

$ sudo apt-get install dnsrecon

Basic Usage of DNSRecon

To perform a simple DNS enumeration on a domain, use the following command:

$ dnsrecon -d example.com

This command retrieves basic DNS records such as A, MX, and NS for the domain example.com.

 

Brute-Force Subdomain Enumeration

To find subdomains using brute-force techniques, use:

$ dnsrecon -d example.com -D /usr/share/wordlists/dnsrecon/subdomains-top-5000.txt -t brt

This command uses a predefined wordlist to discover subdomains.

Performing Zone Transfer

Zone transfer can help reveal internal DNS records if misconfigured:

$ dnsrecon -d example.com -t axfr

If the DNS server allows zone transfers, this command will return all DNS records.

Reverse Lookup on an IP Range

To perform reverse lookups on an IP range, use:

$ dnsrecon -r 192.168.1.0/24

This command tries to resolve hostnames for the given IP range.

DNSRecon is a valuable tool for gathering DNS-related information about a target domain. It helps security professionals analyze DNS configurations and detect vulnerabilities such as exposed subdomains and misconfigured zone transfers.