DNSRecon

dnsrecon -d nullbrain.com -t axfr

dnsrecon -d nullbrain.com -D ~/list.txt -t brt

• Explanation:

  • -d option is to specify the domain name

  • -D option is to specify file name containing subdomain strings.

  • -t option is to specify the type of enumeration to perform