https://tools.kali.org/information-gathering/dnsenum dnsenum Package Description Multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: Get the host’s addresse (A record). Get the namservers (threaded). Get the MX record (threaded). Perform axfr queries on nameservers and get BIND VERSION (threaded). Get extra names and subdomains via google scraping (google query = “allinurl: -www site:domain”). Brute force subdomains from file, can also perform recursion on subdomain that have NS records (all threaded). Calculate C class domain network ranges and perform whois queries on them (threaded). Perform reverse lookups on netranges ( C class or/and whois netranges) (threaded). Write to domain_ips.txt file ip-blocks. Source: https://github.com/fwaeytens/dnsenum dnsenum Homepage | Kali dnsenum Repo Author: Filip Waeytens, tix tixxDZ License: GPLv2 Disclamer: All information contained in this site and all software provided by it are intended solely for the purpose of helping users to secure their online privacy from eventual cyberattacks. Such information and software do NOT constitute professional advice/services, are indicative and provided for educational use only. The site does not guarantee their accuracy or completeness. The use of such information and software for any purpose other than the abovementioned is strictly forbidden. The site and/or the site’s owner(s) hold no responsibility for any misuse of the above by third parties and reserve their rights to ban the access of users or take any legal action against users, should any misuse be noticed. ... https://www.youtube.com/watch?v=HX9Bn8Lhwuc