DNSRecon
A Python command-line script for DNS enumeration, record lookups, zone transfer checks and subdomain brute-forcing.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About DNSRecon
DNSRecon is a DNS enumeration script written in Python, a port of a Ruby tool its author first wrote in 2007. It queries a domain's DNS records, tests whether zone transfers are allowed and can brute-force subdomains to map out what a domain exposes.
The repository also includes a Dockerfile and a REST variant of the tool. It suits penetration testers and administrators auditing their own DNS setup.
Strengths
- Covers record lookups, zone transfer tests and subdomain brute-forcing
- Can run in Docker
- Includes a REST interface variant
- Long history and wide use
Limitations
- Intended for authorized testing only
- Command-line only with no graphical interface
Details
- Pricing
- FreeFree and open source.
- License
- Open source, license not stated
- Developer
- darkoperator
- Platforms
- Windows, macOS, Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- No
- Best suited for
- Security testers and admins mapping the DNS footprint of a domain they are authorized to test
- Categories
- Network tools, Security tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to DNSRecon
Compare allSoftware that can replace DNSRecon for an important use case, and what changes if you switch.
DNSDumpster
A web tool that discovers DNS records and hosts related to a domain for security research.
DNSDumpster runs in the browser with nothing to install and relies on passive public DNS data, so zone transfer tests and brute-forcing are not available.
dnsx
Query DNS records in bulk from the command line.
dnsx is an MIT-licensed Go command-line tool for bulk DNS queries with custom resolvers, focused on record lookups rather than zone transfer checks.
Subfinder
Find subdomains using passive online data sources.
Subfinder is an MIT-licensed tool that finds subdomains through passive online sources instead of brute-forcing, and some sources need API credentials.
Similar software
Related functionality, not necessarily a direct replacement.
dnstwist
A domain permutation engine that finds lookalike domains used for typosquatting, phishing and impersonation.
doggo
Look up DNS records with a readable command-line client.
q
A small command-line DNS client supporting UDP, TCP, DoT, DoH, DoQ, ODoH and DNSCrypt.
BIND 9
Open-source DNS server software from ISC that also provides the dig command-line query tool.
Naabu
Discover listening network ports with a command-line scanner.
httpx
Inspect HTTP services with ProjectDiscovery's command-line toolkit.
