dnswalk: Audit a DNS Zone for Consistency
dnswalk transfers a DNS zone and audits it for internal consistency: missing PTR records, mismatched addresses, and bad delegations. Real Kali output shows you how to read what it flags.
Penetration Testing
Offensive technique run against lab gear you own. Articles tagged Penetration Testing cover recon, enumeration and exploitation from a real Kali host wired into the lab.
Latest posts
dnstracer: Follow the DNS Delegation Chain
dnstracer follows the DNS delegation chain from the root servers down to the authoritative source instead of just dumping records. You see where a nameserver's answer actually comes from, with real output captured from Kali in the lab.
massdns: High-Performance DNS Enumeration at Scale
massdns is a high-performance stub resolver that pushes over 350,000 DNS queries per second by spreading load across public resolvers. See how internet-scale subdomain enumeration works, with real output from Kali in our lab.
dnsmap: DNS Subdomain Brute Forcing on Kali
When zone transfers are refused, brute force is how you enumerate a domain. dnsmap grinds a wordlist of common hostnames against a target and keeps every name that resolves. Real output captured from Kali against a BIND9 server in the lab.
dnsenum: Enumerate a Domain's DNS End to End
Point dnsenum at a domain and get nameservers, MX records, zone transfer attempts, subdomain brute forcing, and reverse sweeps in one report. Every capture is real output from a Kali box against a BIND9 server in the lab.
dnsrecon: The Complete DNS Enumeration Tool Guide
dnsrecon rolls zone transfers, SRV enumeration, subdomain brute forcing, and reverse lookups into one Python tool. Every command here was run from Kali against a real BIND9 server, with XML, CSV, and JSON export covered.