DNSRecon is a DNS enumeration tool that performs reconnaissance on domain name systems for security assessment and network troubleshooting purposes.
The tool addresses the need to gather DNS information about a target domain or network through multiple enumeration techniques. It works by offering a suite of DNS query methods: zone transfer checks against all nameservers, enumeration of standard DNS records like MX, SOA, NS, A, AAAA, SPF and TXT, SRV record discovery, top-level domain expansion, wildcard resolution detection, subdomain brute forcing using wordlists, reverse PTR lookups across IP ranges or CIDR blocks, and DNS cache checking. The tool can also enrich findings by integrating with Shodan to expand netblocks discovered in SPF and WHOIS data, with optional active validation to confirm results.
DNSRecon suits penetration testers and security professionals performing domain reconnaissance, as well as network administrators troubleshooting DNS issues. It works best when you need comprehensive DNS information gathering across multiple enumeration vectors in a single tool. The project provides both a command-line interface and a REST API for integration into automated workflows. The REST API enforces thread limits and includes safeguards around wordlist directory configuration to prevent accidental exposure of sensitive files.
The project maintains active development with regular updates to dependencies and tooling. The codebase includes automated testing infrastructure and code quality checks through linting and formatting. Installation is streamlined through modern Python packaging tools, with Python 3.12 or higher required. Development setup is documented with clear instructions for contributors to install dependencies, run tests, and perform code quality validation.
