- by x32x01 ||
If you work in penetration testing, digital forensics, or security auditing, you’ve probably heard about dnsenum - a powerful multithreaded tool used to gather DNS information and map out domain network ranges. It’s one of the most useful utilities for discovering subdomains, DNS records, IP blocks, and more.
followed by installation steps for multiple Linux distributions.
What Is dnsenum?
Dnsenum is a multithreaded Perl script designed to extract as much DNS information as possible from a target domain. It automates the process of DNS enumeration and helps identify non-contiguous IP blocks, related hosts, and domain structures - making it a valuable tool for ethical hackers and security researchers.
Key Features of dnsenum
Dnsenum currently performs the following operations:

Project Information
How to Install dnsenum
Below are the official installation methods for different Linux distributions.
Install dnsenum on Kali Linux
Kali already includes dnsenum in the official repositories. Just run:
Install dnsenum on Debian, Linux Mint, Ubuntu
For Debian-based systems that don’t include dnsenum directly, use this method:
Install dnsenum on BlackArch Linux
BlackArch users can install it from the repo with:
followed by installation steps for multiple Linux distributions.
What Is dnsenum?
Dnsenum is a multithreaded Perl script designed to extract as much DNS information as possible from a target domain. It automates the process of DNS enumeration and helps identify non-contiguous IP blocks, related hosts, and domain structures - making it a valuable tool for ethical hackers and security researchers.Key Features of dnsenum
Dnsenum currently performs the following operations:- Retrieve host addresses (A records).
- Identify nameservers (threaded).
- Extract MX records (threaded).
- Perform AXFR zone transfer attempts and collect BIND versions (threaded).
- Discover extra names and subdomains using Google scraping
("allinurl: -www site:domain"). - Brute force subdomains from a wordlist, with recursive checks for subdomains that have NS records (threaded).
- Calculate C-class network ranges and run WHOIS queries on them (threaded).
- Perform reverse DNS lookups on netranges (threaded).
- Save all discovered IP ranges to domain_ips.txt.
Project Information
- Homepage: https://github.com/SparrowOchon/dnsenum2
- Author: Filip Waeytens, tix tixxDZ
- License: GPLv2
How to Install dnsenum
Below are the official installation methods for different Linux distributions.Install dnsenum on Kali Linux
Kali already includes dnsenum in the official repositories. Just run: Code:
sudo apt install dnsenum Install dnsenum on Debian, Linux Mint, Ubuntu
For Debian-based systems that don’t include dnsenum directly, use this method: Code:
sudo apt install cpanminus
git clone https://github.com/SparrowOchon/dnsenum2
cd dnsenum2
make
sudo make install Install dnsenum on BlackArch Linux
BlackArch users can install it from the repo with: Code:
sudo pacman -S dnsenum Last edited: