DNS is a very large topic i will add stuff here in the next month
For now i suggest u check this link out:
CNAME takeover and dns-enum
dig
1
2
3
4
5
6
7
8
9
10
11
12
13
14
| #dns lookup for host
dig <domain>
#trace path to host
dig <domain> +trace
#show dns servers
dig -t ns <domain>
#query a machine for any record
dig <hostname> ANY @<nameserver-ip>
#attempt a zone transfer, if this works u ll have amazing intel on your target
dig @<dnsserver> -t axfr <domain>
|
whois
1
2
| #dns lookup
whois <domain>
|
Important Articles
Dig commands. hostinger.com
