# DNS Enumeration

> Master the Domain Name System. Learn to extract zone data, analyze DNS records, and weaponize subdomain discovery to map the target's hidden infrastructure.

Canonical: https://codelivly.com/rooms/dns-enumeration
Last updated: 2026-07-12

| | |
|---|---|
| Level | Intermediate |
| Category | Cybersecurity |
| Lessons | 5 |
| Estimated time | 45 min |
| XP | 200 |

The Domain Name System (DNS) is the phonebook of the internet, but for an attacker, it is an unredacted blueprint of the target's infrastructure. Amateurs just use nslookup to find an IP address and move on. Professionals understand that DNS records reveal the target's cloud providers, email gateways, internal network structure, and forgotten development environments.

In this module, we transition from basic IP resolution to advanced DNS interrogation. You will learn to decode the hidden meanings behind MX, TXT, and SRV records, exploit misconfigured authoritative name servers to dump entire DNS databases via Zone Transfers, and master modern automation tools like dnsrecon, dnsx, and puredns to discover hidden subdomains at scale. Stop guessing IP addresses. Start mapping the entire digital empire.

## Lessons

1. Understanding DNS (30 min)
2. dig & nslookup (30 min)
3. Zone Transfers (30 min)
4. dnsrecon: Automated DNS Enumeration (30 min)
5. Guided Lab: Mapping an Organization's Full DNS Footprint (30 min)

## Related

- [Learning path: Recon & Enumeration Tools](https://codelivly.com/learning-paths/recon-enumeration-tools)
- [All rooms](https://codelivly.com/rooms)