Target Performs a basic DNS Query.

nslookup

Returns mails server within specified domain.

dig ​domain MX

Returns name servers within specified domain.

dig domain NS

Attempts a zone transfer from specified name server.

dig axfr @​name_server domain

Attempts a zone transfer from specified name server.

dnsrecon -d domain -a --name_server ​server

Scans for DNS servers within specified network.

nmap -sU -p53 ​network

Attempts to brute forces subdomains of specified domain.

dnsmap domain

Automates domain enumeration. Performs zone transfer, subdomain brute force, and more.

perl fierce.pl -dns ​domain --dnsserver server

Automates domain enumeration.

dnsenum.pl domain