Tagged “DNS”

7 entries tagged “DNS”. Browse all tags

All entries

whois

beginner

The whois quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Look up a domain, find who owns an IP, enumerate a netblock, pull name servers, read registration dates, query a registry directly, and route around a redacted or wrong-server answer with RDAP.

dig

beginner

The dig quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Resolve A/AAAA, find MX and NS, read SPF and DMARC TXT, reverse-lookup an IP, query a specific resolver, trace delegation from the root, and test a zone transfer.

dnsenum

intermediate

The dnsenum quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pull records and name servers, test a zone transfer, brute force subdomains, pick a resolver for split-horizon DNS, sweep netranges, grow a wordlist, and export XML for your notes.

DNSRecon

intermediate

The DNSRecon quick reference: modes, flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pull standard records, test a zone transfer, brute force subdomains, reverse an IP range, walk a DNSSEC zone, pin a resolver, and save CSV/JSON you can diff.

Gobuster

beginner

The Gobuster quick reference: modes, flags, a modular cheat sheet, and a worked breakdown of every real task. Brute-force directories and files, discover vhosts and DNS subdomains, filter false positives by status and length, fuzz with the FUZZ keyword, route through Burp, and enumerate open S3 buckets.

Amass

advanced

The Amass quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real recon situation. Enumerate subdomains passively then actively, load API keys for real coverage, brute force names, pull JSON with jq, find related domains by WHOIS/ASN/CIDR, diff the stored database, and validate before you scan.

theHarvester

intermediate

The theHarvester quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pull subdomains from certificate transparency, scrape hosts and emails from search engines, resolve and validate leads with DNS, page a noisy source, wire in API keys, save JSON for jq, and run it in Docker.