41 dnsenum(1) - Kailash Tool Reference
41.1 dnsenum
dnsenum - Enumerates DNS information including subdomains.
| Layer | CLASSIC |
| Category | c-01-information-gathering |
| Safety class | safe |
| Licence | GPL-2.0-or-later |
| Upstream | github.com/SparrowOchon/dnsenum2 |
41.1.1 NAME
dnsenum - Enumerates DNS information including subdomains.
41.1.2 SYNOPSIS
Not derived automatically - see upstream documentation. This page does not hand-copy flags (generation contract, ADR-0001).
41.1.3 DESCRIPTION (upstream)
README - dnsenum2.pl VERSION: 1.3.2 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. 1. Get the host’s addresse (A record). 2. Get the nameservers (threaded). 3. Get the MX record (threaded). 4. Perform axfr queries on nameservers and get BIND VERSION (threaded). 5. Get extra names and subdomains via google scraping (google query = “-www site:domain”). 6. Brute force subdomains from file, can also perform recursion on subdomain that have NS records (all threaded). 7. Calculate C class domain network ranges and perform whois queries on them (threaded). 8. Perform reverse lookups on netranges ( C class or/and whois netranges) (threade
41.1.4 SEE ALSO
- Category: c-01-information-gathering in the category directory (sister tools listed there).
ref: pin - verified 2026-10-14