description:
Multi-threaded script, used to enumerate information in the domain and find discontinuous IP blocks.
Supported operations: domain name query, zone conversion, google crawl, domain brute force cracking (recursion is also supported), ip domain name query information service and reverse lookup.
Operation:
Obtain the address of the host (A record).
Get the domain name server (thread).
Get MX records (threads).
AXFR query is executed on the domain name server (thread).
Get additional names and subdomains via Google crawl (Google query="allinurl:-www site:domain").
The brute force subdomain in (required) can also perform recursion on subdomains with NS records (all threaded).
Calculate the IP network ranges of class C based on the results, and execute whois queries (threaded) on them.
Perform a reverse lookup on the netrange (class C or/and whois netrange) (thread).
Write the results of discontinuous ip-blocks to the domain_ips.txt file.
Option:
Brute force -f switch takes precedence over the default dns.txt
General options:
--dnsserver <server>
使用此DNS服务器执行所有A，NS和MX查询，然后将AXFR和PTR查询发送到域的NS服务器。
--enum
等同于--threads 5 -s 20 -w的快捷方式选项。
-h,--help
打印帮助信息
--noreve