DNSEnum

This tool can retrieve host addresses, name servers, MX records, sub domains, whois performances and reverse lookups for netblocks. It performs a quick enumeration.

Command Use:

• cd /pentest/enumeration/dns/dnsenum
• ./dnsenum.pl –-enum –f –r <target website>

The flags allow for a powerful scan including sub domains.