Kali侦察DNS工具

kali侦察DNS工具

---

1.dnsmap

┌──(root💀kali)-[~]
└─# dnsmap baidu.com                                                                                                                                130 ⨯ 1 ⚙
dnsmap 0.35 - DNS Network Mapper

[+] searching (sub)domains for baidu.com using built-in wordlist
[+] using maximum random delay of 10 millisecond(s) between requests

a.baidu.com
IP address #1: 112.80.248.124

ab.baidu.com
IP address #1: 111.206.209.128
IP address #2: 111.206.209.127

ac.baidu.com
IP address #1: 180.97.104.203

ad.baidu.com
IP address #1: 182.61.62.50

ae.baidu.com
IP address #1: 110.242.68.66

af.baidu.com
IP address #1: 110.242.68.110
IP address #2: 157.255.77.113

ag.baidu.com
IP address #1: 202.108.23.199
IP address #2: 202.108.23.198

ai.baidu.com
IP address #1: 42.81.8.202

---

2.dnsrecon

┌──(root💀kali)-[~]
└─# dnsrecon -d baidu.com                                                                                                                                 1 ⚙
[*] Performing General Enumeration of Domain: baidu.com
[-] DNSSEC is not configured for baidu.com
[*]      SOA dns.baidu.com 110.242.68.134
[*]      NS dns.baidu.com 110.242.68.134
[*]      NS ns2.baidu.com 220.181.33.31
[*]      NS ns3.baidu.com 112.80.248.64
[*]      NS ns4.baidu.com 14.215.178.80
[*]      NS ns7.baidu.com 180.76.76.92
[*]      MX mx.n.shifen.com 111.202.115.85
[*]      MX mx.n.shifen.com 111.206.215.185
[*]      MX mx.maillb.baidu.com 111.202.115.85
[*]      MX jpmx.baidu.com 12.0.243.41
[*]      MX mx50.baidu.com 12.0.243.41
[*]      MX mx1.baidu.com 220.181.3.85
[*]      MX mx1.baidu.com 111.202.115.85
[*]      A baidu.com 220.181.38.148
[*]      A baidu.com 39.156.69.79
[*] Enumerating SRV Records
[+]      SRV _sip._tls.baidu.com sip.baidu.com 111.202.115.68 443
[+]      SRV _sipfederationtls._tcp.baidu.com sip.n.shifen.com 111.202.115.68 5061
[+]      SRV _sip._tcp.baidu.com vcs.wshifen.com 61.135.165.170 5060
[+]      SRV _sips._tcp.baidu.com vcs.wshifen.com 61.135.165.170 5061
[+]      SRV _h323cs._tcp.baidu.com vcs.wshifen.com 61.135.165.170 1720
[+]      SRV _h323ls._udp.baidu.com vcs.wshifen.com 61.135.165.170 1719
[+]      SRV _xmpp-server._tcp.baidu.com xmpp.wshifen.com 61.135.165.169 5269
[+]      SRV _xmpp-client._tcp.baidu.com xmpp.wshifen.com 61.135.165.169 5222
[+]      SRV _autodiscover._tcp.baidu.com email.baidu.com 111.202.115.87 443
[+]      SRV _sipinternaltls._tcp.baidu.com dirpool.internal.baidu.com no_ip 5061
[+] 10 Records Found

---

3.fierce

┌──(root💀kali)-[~]
└─# fierce --domain baidu.com                                                                                                                         2 ⨯ 1 ⚙
NS: dns.baidu.com. ns2.baidu.com. ns3.baidu.com. ns4.baidu.com. ns7.baidu.com.
SOA: dns.baidu.com. (110.242.68.134)
Zone: failure
Wildcard: failure
Found: 0.baidu.com. (111.206.223.136)
Found: 01.baidu.com. (110.242.68.125)
Found: 11.baidu.com. (202.108.23.222)
Found: 8.baidu.com. (153.37.235.186)
Found: a.baidu.com. (112.80.248.124)
Found: abc.baidu.com. (110.242.68.3)
Found: ac.baidu.com. (180.97.104.203)
Found: ad.baidu.com. (182.61.62.50)
Found: ae.baidu.com. (110.242.68.66)
Found: af.baidu.com. (157.255.77.113)
Found: ag.baidu.com. (202.108.23.198)
Found: ai.baidu.com. (42.81.8.202)
Found: antivirus.baidu.com. (103.235.46.69)
Found: ap.baidu.com. (117.185.16.78)
Nearby:
{'117.185.16.73': '.',
 '117.185.16.74': '.',
 '117.185.16.75': '.',
 '117.185.16.76': '.',
 '117.185.16.77': '.',
 '117.185.16.78': '.',
 '117.185.16.79': '.',
 '117.185.16.80': '.',
 '117.185.16.81': '.',
 '117.185.16.82': '.',
 '117.185.16.83': '.'}
Found: apollo.baidu.com. (39.156.69.32)
Found: app.baidu.com. (112.80.255.227)
Found: aq.baidu.com. (111.206.208.219)
Found: ar.baidu.com. (110.242.69.10)
Found: as.baidu.com. (110.242.69.12)
Found: auth.baidu.com. (220.181.107.194)
Found: auto.baidu.com. (157.255.77.214)
Found: b.baidu.com. (111.206.208.228)
Found: b2b.baidu.com. (111.206.209.93)
Found: bbs.baidu.com. (111.206.209.45)
Found: bd.baidu.com. (106.12.34.143)
Found: bh.baidu.com. (112.80.248.26)
Found: blue.baidu.com. (122.143.8.35)
Nearby:
{'122.143.8.30': '30.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.31': '31.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.32': '32.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.33': '33.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.34': '34.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.35': '35.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.36': '36.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.37': '37.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.38': '38.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.39': '39.8.143.122.adsl-pool.jlccptt.net.cn.',
 '122.143.8.40': '40.8.143.122.adsl-pool.jlccptt.net.cn.'}
Found: bnc.baidu.com. (112.80.255.214)
Found: br.baidu.com. (110.242.68.66)
Found: brazil.baidu.com. (110.242.68.66)