DNS (53)

1. Enumeration

Basics

nslookup --- SERVER <IP> --- 127.0.0.1
dig @<IP> any <domain_name>
dig axfr <domain_name> @<IP>

host <domain name>
host -t mx <domain name>
host -t txt <domain name>

Additional

nmap -n --script "(default and *dns*) or fcrdns or dns-srv-enum or dns-random-txid or dns-random-srcport" <IP>\
nmap --script=dns-zone-transfer -p 53 <domain_name>

dnsrecon -d <domain_name> -n <IP>
dnsenum <domain_name>