Exercise: Perform DNS enumeration using the Nmap tool

1. Open a terminal in Kali Linux and type “nmap -sL <target IP or domain name>” to perform a
   simple DNS enumeration scan.
2. This will return a list of hostnames associated with the target IP or domain name.
3. To perform a more comprehensive DNS enumeration, type “nmap -sL –dns-servers <target
   IP or domain name>”
4. To check for DNS zone transfer, type “nmap –script dns-zone-transfer -p 53 <target IP or
   domain name>”
5. To check for subdomains, type “nmap -sL –script dns-brute -p 53 <target IP or domain
   name>”
6. To find DNS server version, type “nmap -sV –script dns-version -p 53 <target IP or domain
   name>”

Reference:
Nmap: https://nmap.org/book/man.html