> For the complete documentation index, see [llms.txt](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/enumeration/dns-enumeration.md).

# DNS Enumeration

**1. DNS Enumeration:**

* **Basic Query:**
* ```bash
  nslookup target.com
  ```
* **Zone Transfer (using dig):**
* ```bash
  dig axfr @<nameserver_IP> target.com
  ```
* **Enumerate Name Servers:**
* ```bash
  dig +nssearch target.com
  ```
* **Brute Force Subdomains:**
* ```bash
  fierce -dns target.com
  ```
* **Reverse DNS Lookup:**

  ```
  nslookup <IP_address>
  ```

**2. DNS Exploitation:**