nslookup
Reverse IP Lookup
System information extraction
DNS footprinting reveals information about DNS zone data. DNS zone data include DNS domain names, computer names, IP addresses, and much more information about a network. An attacker uses DNS information to determine key hosts in the network and then performs social engineering attacks to gather even more information.
DNS Records and Their Purposes
set type=<resourcerecordtype>
DNS footprinting helps in determining the following records about the target DNS:
| Record Type | Description |
|---|---|
| A | Points to a host's IP address |
| AAAA | Points to a host's IPv6 address |
| MX | Points to domain's mail server |
| NS | Points to host's name server |
| CNAME | Canonical naming allows aliases to a host |
| SOA | Indicates authority for a domain |
| SRV | Service records |
| PTR | Maps IP address to a hostname |
| RP | Responsible person |
| HINFO | Host information record includes CPU type and OS |
| TXT | Unstructured text records |