dnsenum的用法
root@kali:/cyber# dnsenum --enum baidu.com
dnsenum VERSION:1.2.6
----- baidu.com -----
Host's addresses:
__________________
baidu.com. 600 IN A 220.181.38.148
baidu.com. 600 IN A 39.156.69.79
Name Servers:
______________
ns4.baidu.com. 171875 IN A 14.215.178.80
ns7.baidu.com. 166931 IN A 180.76.76.92
dns.baidu.com. 172077 IN A 202.108.22.220
ns2.baidu.com. 172109 IN A 220.181.33.31
ns3.baidu.com. 40162 IN A 112.80.248.64
Mail (MX) Servers:
___________________
mx1.baidu.com. 300 IN A 220.181.3.85
mx1.baidu.com. 300 IN A 111.202.115.85
jpmx.baidu.com. 6264 IN A 12.0.243.41
mx50.baidu.com. 300 IN A 180.76.13.18
mx.n.shifen.com. 600 IN A 220.181.3.85
mx.n.shifen.com. 600 IN A 220.181.50.185
mx.maillb.baidu.com. 600 IN A 220.181.50.185
fierce的用法
root@kali:/cyber# fierce -dns baidu.com
DNS Servers for baidu.com:
ns2.baidu.com
ns3.baidu.com
dns.baidu.com
ns4.baidu.com
ns7.baidu.com
Trying zone transfer first...
Testing ns2.baidu.com
Request timed out or transfer not allowed.
Testing ns3.baidu.com
Request timed out or transfer not allowed.
Testing dns.baidu.com
Request timed out or transfer not allowed.
Testing ns4.baidu.com
Request timed out or transfer not allowed.
Testing ns7.baidu.com
Request timed out or transfer not allowed.
Unsuccessful in zone transfer (it was worth a shot)
Okay, trying the good old fashioned way... brute force
Checking for wildcard DNS...
Nope. Good.
Now performing 2280 test(s)...
180.149.144.203 0.baidu.com
180.101.49.147 01.baidu.com
180.101.212.65 01.baidu.com
220.181.57.55 11.baidu.com
220.181.33.181 8.baidu.com
220.181.44.96 a.baidu.com
14.215.177.38 abc.baidu.com
14.215.177.39 abc.baidu.com
180.97.104.203 ac.baidu.com
10.94.49.39 access.baidu.com
182.61.62.50 ad.baidu.com
10.26.109.19 admin.baidu.com
10.42.4.225 ads.baidu.com
123.125.114.144 ae.baidu.com
157.255.77.113 af.baidu.com
123.125.114.87 af.baidu.com
202.108.23.198 ag.baidu.com
202.108.23.199 ag.baidu.com
116.31.127.230 ai.baidu.com
103.235.46.69 antivirus.baidu.com
180.149.132.182 ap.baidu.com
123.125.115.15 apollo.baidu.com
14.215.177.167 app.baidu.com
180.97.104.89 aq.baidu.com
180.97.36.113 ar.baidu.com
106.120.159.231 ar.baidu.com
14.215.177.167 as.baidu.com
10.99.87.18 asm.baidu.com
220.181.107.194 auth.baidu.com
180.101.49.135 auth.baidu.com
180.97.33.136 auto.baidu.com
180.101.49.131 auto.baidu.com
dmitry的用法
用来查询dns的whois信息
root@kali:~# dmitry -wnpb baidu.com
Deepmagic Information Gathering Tool
"There be some deep magic going on"
HostIP:39.156.69.79
HostName:baidu.com
Gathered Inic-whois information for baidu.com
---------------------------------
Domain Name: BAIDU.COM
Registry Domain ID: 11181110_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.markmonitor.com
Registrar URL: http://www.markmonitor.com
Updated Date: 2019-05-09T04:30:46Z
Creation Date: 1999-10-11T11:05:17Z
Registry Expiry Date: 2026-10-11T11:05:17Z
Registrar: MarkMonitor Inc.
Registrar IANA ID: 292
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.2083895740
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited
Name Server: NS1.BAIDU.COM
Name Server: NS2.BAIDU.COM
Name Server: NS3.BAIDU.COM
Name Server: NS4.BAIDU.COM
Name Server: NS7.BAIDU.COM