SANS ISC: New version of dnsmap

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS ISC InfoSec Forums

dnsmap v0.30 has been released.  For those of you who are not familiar with dnsmap it is a DNS reconnaissance tool useful in the reconnaissance phase of penetration tests.  dnsmap can be used to reduce the amount of manual effort required to do DNS enumeration and discovery and often reduces or eliminates the traditional whois lookups and scanning. 

More information is available at the GnuCitizen Blog

From the blog, here is a list of some of the new features.

• IPv6 support
• delay option (-d) added. This is useful in cases where dnsmap is killing your bandwidth
• ignore IPs option (-i) added. This allows ignoring user-supplied IPs from the results. Useful for domains which cause dnsmap to produce false positives
• changes made to make dnsmap compatible with OpenDNS
• disclosure of internal IP addresses (RFC 1918) are reported
• updated built-in wordlist
• included a standalone three-letter acronym (TLA) subdomains wordlist
• domains susceptible to “same site” scripting are reported
• completion time is now displayed to the user
• mechanism to attempt to bruteforce wildcard-enabled domains
• unique filename containing timestamp is now created when no specific output filename is supplied by user

-- Rick Wanner - rwanner at isc dot sans dot org