43  dnsrecon(1) - Kailash Tool Reference

43.1 dnsrecon

dnsrecon - DNS enumeration script — zone transfers, records, reverse lookups (overlay pin).

Layer CLASSIC
Category c-01-information-gathering
Safety class safe
Licence GPL-2.0-only
Upstream github.com/darkoperator/dnsrecon

43.1.1 NAME

dnsrecon - DNS enumeration script — zone transfers, records, reverse lookups (overlay pin).

43.1.2 SYNOPSIS & usage

Derived from the upstream README at generation time; verify against --help where the tool is installed.

   curl -LsSf https://astral.sh/uv/install.sh | sh
   git clone https://github.com/darkoperator/dnsrecon.git
   cd dnsrecon

43.1.3 DESCRIPTION (upstream)

DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a security assessment and network troubleshooting. This script provides the ability to perform: * Check all NS Records for Zone Transfers. * Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT). * Perform common SRV Record Enumeration. * Top Level Domain (TLD) Expansion. * Check for Wildcard Resolution. * Brute Force subdomain and host A and AAAA records given a domain and a wordlis

43.1.4 SEE ALSO

ref: v1.6.4-unstable-2026-10-09 - verified 2026-10-14