fwaeytens/dnsenum

dnsenum is a perl script that enumerates DNS information

README - dnsenum.pl VERSION: 1.2.4

multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks.

OPERATIONS:

1) Get the host's addresse (A record).

2) Get the namservers (threaded).

3) Get the MX record (threaded).

4) Perform axfr queries on nameservers and get BIND VERSION (threaded).

5) Get extra names and subdomains via google scraping
   (google query = "allinurl: -www site:domain").

6) Brute force subdomains from file, can also perform recursion
   on subdomain that have NS records (all threaded).

7) Calculate C class domain network ranges and perform whois
   queries on them (threaded).

8) Perform reverse lookups on netranges
   ( C class or/and whois netranges) (threaded).

9) Write to domain_ips.txt file ip-blocks.

Changelog from version 1.2.2

• Fixed GoogleScraping
• Fixed wildcard issues
• Changed output function to get rid of errors with new Net::DNS version
• A bit of cleanup here and there
• Removed Bind Version detection

PREREQUISITES:

Modules that are included in perl 5.10.0: Getopt::Long IO::File Thread::Queue

Other Necessary modules: Must have: Net::IP Net::DNS Net::Netmask Optional: Net::Whois::IP HTML::Parser WWW::Mechanize XML::Writer

To install a module, simply run (as root):

perl -MCPAN -e shell

and then type: install eg: cpan[1]> install XML::Writer

Perl ithreads support: perl version must be compliled with ithreads support. threads threads::shared

OPTIONS: run "perldoc dnsenum.pl".

Special thanks to all Perl developers.

Filip Waeytens <filip.waeytens[at]gmail.com> tix tixxDZ <tixxdz[at]gmail.com>

dnsenum's Issues

dnsenum.pl some tips spell error

Line 200 and Line 203 in dnsenum.pl file spell "disabled" to "desabled"

dnsenum.pl line 55

**I 'm installing ubuntu and I get error

**
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = "UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
Can't locate Net/IP.pm in @inc (you may need to install the Net::IP module) (@inc contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.20.2 /usr/local/share/perl/5.20.2 /usr/lib/x86_64-linux-gnu/perl5/5.20 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.20 /usr/share/perl/5.20 /usr/local/lib/site_perl .) at dnsenum.pl line 55.
BEGIN failed--compilation aborted at dnsenum.pl line 55.

Memory leak?

Dnsenum began to consume more than 6 GB of RAM. Dictionary of about 32 megabytes

Can't locate package AutoLoader for @Net::Whois::IP::ISA

getting this error when i execute dnsenum --enum google.com
Can't locate package AutoLoader for @net::Whois::IP::ISA at /usr/bin/dnsenum line 536

Trying Zone Transfers and getting Bind Versions:

---

Trying Zone Transfer for google.com on ns3.google.com ...
AXFR record query failed: corrupt packet

Inventory notification

Your tool/software has been inventoried on Rawsec's CyberSecurity Inventory.

https://inventory.rawsec.ml/tools.html#dnsenum

What is Rawsec's CyberSecurity Inventory?

An inventory of tools and resources about CyberSecurity. This inventory aims to help people to find everything related to CyberSecurity.

• Open source: Every information is available and up to date. If an information is missing or deprecated, you are invited to (help us).
• Practical: Content is categorized and table formatted, allowing to search, browse, sort and filter.
• Fast: Using static and client side technologies resulting in fast browsing.
• Rich tables: search, sort, browse, filter, clear
• Fancy informational popups
• Badges / Shields
• Static API
• Twitter bot

More details about features here.

Note: the inventory is a FLOSS (Free, Libre and Open-Source Software) project.

Why?

• Specialized websites: Some websites are referencing tools but additional information is not available or browsable. Make additional searches take time.
• Curated lists: Curated lists are not very exhaustive, up to date or browsable and are very topic related.
• Search engines: Search engines sometimes does find nothing, some tools or resources are too unknown or non-referenced. These is where crowdsourcing is better than robots.

Why should you care about being inventoried?

Mainly because this is giving visibility to your tool, more and more people are using the Rawsec's CyberSecurity Inventory, this helps them find what they need.

Badges

The badge shows to your community that your are inventoried. This also shows you care about your project and want it growing, that your tool is not an abandonware.

Feel free to claim your badge here: http://inventory.rawsec.ml/features.html#badges, it looks like that , but there are several styles available.

Want to thank us?

If you want to thank us, you can help make the project better known by tweeting about it! For example:

So what?

That's all, this message is just to notify you if you care.

dnsenum.pl line 843

Whenever i start a scan it always fails at Trying Zone Transfers and getting Bind Versions and gives this message:

Trying Zone Transfers and getting Bind Versions:

---

ERROR: tcp recv failed:
improperly terminated AXFR at /home/d4nte/dnsenum/dnsenum.pl line 843.

Repo Unmaintained, New Active Repo.

As many of you have probably seen, this repo is not being maintained and has not been maintained since 2015. Numerous of the mentioned bugs made this Unusable or a pain to use. The updated maintained version can be found here: https://github.com/SparrowOchon/dnsenum2