OSINT
dig / nslookup / host
DNS query tools for records, zone transfer attempts, and resolution checks.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Validating DNS records and discovering misconfigurations.
How
Query A/AAAA/MX/TXT/NS/ANY; try AXFR only if authorized and relevant.
Why
DNS is the map of internet assets — mandatory skill.
Commands & usage
dig example.com ANY +noall +answer
dig @ns1.example.com example.com AXFR
dig example.com TXT
host -t MX example.com
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Tags
Related in OSINT
Maltego
Graph-based link analysis for people, domains, infrastructure, and relationships.
theHarvester
Gathers emails, subdomains, hosts, and employee names from public sources.
Recon-ng
Modular recon framework with workspace DB and API-backed modules.
SpiderFoot
Automated OSINT scanner with web UI covering 200+ data sources.
Sherlock
Hunt usernames across hundreds of social sites.
Maigret
Username OSINT tool with report generation across many sites.