We will learn how to gather DNS information about all the subdomains of a web application or website using DNSMAP network mapper tool. DNSMAP is basically an sub domain mapping tool which gives all the subdomains, their corresponding IPv4 IP address and IPv6 IP address as output.
Unlike other tools, where we use brute force technology to gather all sub domains we dont have a feature to abort the brute forcing if domain uses wildcards technically you can say it producing false positives while enumerating sub domain data. So friends lets first discuss the key features of DNSMAP and what all we can gather using it.
Why to use DNSMAP Tool ?
- Find interesting remote access servers.
- Find badly configured and/or unpatched servers.
- Find new domain names which will allow you to map non-obvious/hard-to-find net blocks.
- Discover embedded devices configured using Dynamic DNS services.
Lets start with Subdomains Enumaration | Information Gathering of Website
Step 1 : just type dnsmap on the kali linux terminal.
