domains / families / security / performing-dns-enumeration-and-zone-transfer

performing-dns-enumeration-and-zone-transfer

separate

'Enumerates DNS records, attempts zone transfers, brute-forces subdomains,

When to use

• Mapping the external attack surface of a target organization during authorized penetration tests
• Discovering hidden subdomains, internal hostnames, and IP addresses exposed via DNS records
• Testing whether DNS servers allow unauthorized zone transfers that leak the entire zone file
• Identifying mail servers, name servers, and service records for further targeted testing
• Validating DNS security configurations including DNSSEC, SPF, DKIM, and DMARC

When not to use

• Domains without authorization
• DNS amplification attacks
• DNS reflection attacks
• Overwhelming DNS servers with excessive queries

Skill page

Source