Reconnaissance

massdns

High-performance DNS stub resolver for bulk lookups.

intermediate

Linux

Reconnaissance

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Resolving huge subdomain lists efficiently.

Feed subdomains + resolvers list; parse A records.

Scale recon without melting a single recursive resolver.

Commands & usage

massdns -r resolvers.txt -t A -o S subdomains.txt -w resolved.txt

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

dnsrecon / dnsenum

DNS enumeration scripts for records, zone transfers, and brute force.

Fierce

DNS reconnaissance tool for locating non-contiguous IP space.

puredns

Fast domain resolver and subdomain bruteforcing with wildcard filtering.