dnsrecon
Scriptable DNS reconnaissance and enumeration.
KaliParrotlow
pkg: dnsrecon
dnsrecon performs standard enumeration, zone transfers, brute forcing, reverse lookups, SRV discovery and Google-based subdomain scraping.
Syntax
dnsrecon -d {domain} [-t {type}]
Example
dnsrecon -d example.com -t std
Runs standard record enumeration (SOA, NS, A, AAAA, MX, SRV) for the domain.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
dnsrecon
Usage examples
dnsrecon -d target.tld -t std
Standard record enumeration.
dnsrecon -d target.tld -t brt -D subs.txt
Brute-force subdomains.
dnsrecon -d target.tld -t axfr
Attempt zone transfers from each NS.
Advantages
- Multiple enumeration techniques in one tool
- JSON/CSV/XML export
- Good for SRV/GTLD discovery
Disadvantages
- Brute forcing is active
- Depends on third-party data for some modes
- Output can be verbose
Tags
#dns#subdomains
Official docs: dnsrecon ↗
Related commands
Frequently asked questions
What is dnsrecon used for?
dnsrecon performs standard enumeration, zone transfers, brute forcing, reverse lookups, SRV discovery and Google-based subdomain scraping.
What is an example dnsrecon command?
A common example is: dnsrecon -d example.com -t std — Runs standard record enumeration (SOA, NS, A, AAAA, MX, SRV) for the domain.
Is dnsrecon part of Kali Linux?
Yes. dnsrecon ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install dnsrecon.
What category of security tool is dnsrecon?
dnsrecon is a Information Gathering tool with a low-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.